Putting the 'role' back in role-playing games since 2002.
Donate to Codex
Good Old Games
  • Welcome to rpgcodex.net, a site dedicated to discussing computer based role-playing games in a free and open fashion. We're less strict than other forums, but please refer to the rules.

    "This message is awaiting moderator approval": All new users must pass through our moderation queue before they will be able to post normally. Until your account has "passed" your posts will only be visible to yourself (and moderators) until they are approved. Give us a week to get around to approving / deleting / ignoring your mundane opinion on crap before hassling us about it. Once you have passed the moderation period (think of it as a test), you will be able to post normally, just like all the other retards.

Increase in hacked accounts posting advertising content

OSK

Arcane
Patron
Joined
Jan 24, 2007
Messages
8,089
Codex 2012 Codex 2013 Codex 2014 PC RPG Website of the Year, 2015 Codex 2016 - The Age of Grimoire Make the Codex Great Again! Serpent in the Staglands Dead State Divinity: Original Sin Project: Eternity Torment: Tides of Numenera Wasteland 2 Shadorwun: Hong Kong Divinity: Original Sin 2 BattleTech Pillars of Eternity 2: Deadfire
Why does everyone keep pushing Authy?
 

Taluntain

Most Frabjous
Staff Member
Joined
Oct 7, 2003
Messages
5,501
Location
Your Mind
It's easy to use, it's free and it works, so why not? I'm sure there are other similar apps if you want to use a different one, but I've never had any reason to use another.
 

Taluntain

Most Frabjous
Staff Member
Joined
Oct 7, 2003
Messages
5,501
Location
Your Mind
It's easy to use, it's free and it works, so why not? I'm sure there are other similar apps if you want to use a different one, but I've never had any reason to use another.

It's closed-source and unnecessarily stores your otp-codes on their servers, so things like this can happen: https://www.pcmag.com/news/twilio-hackers-also-compromised-authy-users
You're free to recommend alternative apps that you feel are more secure. But that usually comes at the cost of ease of use and convenience and isn't really worth it for the average user.
 

OSK

Arcane
Patron
Joined
Jan 24, 2007
Messages
8,089
Codex 2012 Codex 2013 Codex 2014 PC RPG Website of the Year, 2015 Codex 2016 - The Age of Grimoire Make the Codex Great Again! Serpent in the Staglands Dead State Divinity: Original Sin Project: Eternity Torment: Tides of Numenera Wasteland 2 Shadorwun: Hong Kong Divinity: Original Sin 2 BattleTech Pillars of Eternity 2: Deadfire
It's easy to use, it's free and it works, so why not? I'm sure there are other similar apps if you want to use a different one, but I've never had any reason to use another.

It's closed-source and unnecessarily stores your otp-codes on their servers, so things like this can happen: https://www.pcmag.com/news/twilio-hackers-also-compromised-authy-users
You're free to recommend alternative apps that you feel are more secure. But that usually comes at the cost of ease of use and convenience and isn't really worth it for the average user.

Rusty's suggestion is 100% valid, but I get why some people would be turned off. An alternative would be Aegis (https://getaegis.app/). It's open-source and your codes are stored and encrypted on your local device.
 

Taluntain

Most Frabjous
Staff Member
Joined
Oct 7, 2003
Messages
5,501
Location
Your Mind
ease of use and convenience
:notsureifserious:

That's what you're doing by recommending people use a separate computing device altogether.
This might come as a shock to you, but the majority of people today are never separated from their mobile. And they also access websites and apps outside of their man cave, on the move, so having an auth app on their desktop when they need it outside of their home wouldn't be very helpful.
 

Hirato

Purse-Owner
Patron
Joined
Oct 16, 2010
Messages
3,995
Location
Australia
Codex 2012 Codex USB, 2014 Shadorwun: Hong Kong
Greetings {UserName},

I am writing to you from the safety of my vault, as I ponder what may change the nature of a man.
I had prepared well in excess of 10 years of food, but the SirTech brothers have conspired against me and deprived me of my can opener.
As such, I am unable to sustain myself on the canned baby meat, and must persist with only the 150 days of other nourishment..
However, this stock is starting to run out and I require your immediate assistance to secure a new can opener.
You will remunerated fairly, so it is with all haste and secrecy that I bid to ascertain the authenticity of your account with a small transfer of $5,000.

Regards,
Your hyperborean neanderthal,
Cleveland Mark Blakemore
 
Joined
Jan 14, 2018
Messages
50,754
Codex Year of the Donut
ease of use and convenience
:notsureifserious:

That's what you're doing by recommending people use a separate computing device altogether.
This might come as a shock to you, but the majority of people today are never separated from their mobile. And they also access websites and apps outside of their man cave, on the move, so having an auth app on their desktop when they need it outside of their home wouldn't be very helpful.
the average codexer thinks the government's 5g waves are a form of mass mindcontrol

do you still hold the same stance on this topic as you held before reading that statement?
 

Crispy

I feel... young!
Patron
Staff Member
Joined
Feb 16, 2008
Messages
1,877,141
Location
Future Wasteland
Strap Yourselves In
I also believe there's a distinct advantage to using a physically separate device for authentication than the one you're protecting. Your Codex account may be no big deal, but, for other, more important things, such as maybe checking your bank account using your phone or other things that, you know, modern people seem to do nowadays, just using the same device for two-factor authentication seems rather stupid, doesn't it?
 
Joined
Jan 14, 2018
Messages
50,754
Codex Year of the Donut
I also believe there's a distinct advantage to using a physically separate device for authentication than the one you're protecting. Your Codex account may be no big deal, but, for other, more important things, such as maybe checking your bank account using your phone or other things that, you know, modern people seem to do nowadays, just using the same device for two-factor authentication seems rather stupid, doesn't it?
which are you more likely to lose or have someone else get access to:

your desktop computer
OR
your phone

?
 

Crispy

I feel... young!
Patron
Staff Member
Joined
Feb 16, 2008
Messages
1,877,141
Location
Future Wasteland
Strap Yourselves In
Which is more likely to happen:

you lose your phone
OR
you lose your computer
OR
you lose both simultaneously, both somehow winding up in the same person's hands

?
 

Crispy

I feel... young!
Patron
Staff Member
Joined
Feb 16, 2008
Messages
1,877,141
Location
Future Wasteland
Strap Yourselves In
How many people do you think access Codex from a laptop rather than a desktop computer, rusty?

The entire point I'm trying to make is that, just like with backup, using the same device for protection can be unwise. Authy offers excellent 2FA protection, it's typically going to be on a physically separate device, and it's extremely easy to use.

However, acknowledging your point, any 2FA is better than none.
 

lefthandblack

Arcane
Joined
May 5, 2006
Messages
1,287
Location
Domestic Terrorist HQ
Here's an idea faggots: They make this shit called paper and they make this other shit called pens. You can use a pen to write shit on paper. The even make things called notebooks which are just many sheets of paper bound together. You can write your passwords in your notebook and store it somewhere safe so that you can refer to it if you ever forget your password.

Modern technology! What will they think of next!
 
Joined
Jan 14, 2018
Messages
50,754
Codex Year of the Donut
Here's an idea faggots: They make this shit called paper and they make this other shit called pens. You can use a pen to write shit on paper. The even make things called notebooks which are just many sheets of paper bound together. You can write your passwords in your notebook and store it somewhere safe so that you can refer to it if you ever forget your password.

Modern technology! What will they think of next!
you don't understand 2FA
 

lefthandblack

Arcane
Joined
May 5, 2006
Messages
1,287
Location
Domestic Terrorist HQ
Modern technology! What will they think of next!
you don't understand 2FA
I understand it fine. The point is that notebooks can't be hacked therefore do not require the use of a third party to secure your passwords. If you use a separate password for every site the most you will have to worry about is a single sites servers getting hacked and that one account getting compomised. With 2fa you are creating a weak point in which everything has the capacity to be compromised.

Don't put all your eggs in one basket.
 

OSK

Arcane
Patron
Joined
Jan 24, 2007
Messages
8,089
Codex 2012 Codex 2013 Codex 2014 PC RPG Website of the Year, 2015 Codex 2016 - The Age of Grimoire Make the Codex Great Again! Serpent in the Staglands Dead State Divinity: Original Sin Project: Eternity Torment: Tides of Numenera Wasteland 2 Shadorwun: Hong Kong Divinity: Original Sin 2 BattleTech Pillars of Eternity 2: Deadfire
Modern technology! What will they think of next!
you don't understand 2FA
I understand it fine. The point is that notebooks can't be hacked therefore do not require the use of a third party to secure your passwords. If you use a separate password for every site the most you will have to worry about is a single sites servers getting hacked and that one account getting compomised. With 2fa you are creating a weak point in which everything has the capacity to be compromised.

Don't put all your eggs in one basket.

you don't understand 2FA
 
Joined
Jan 14, 2018
Messages
50,754
Codex Year of the Donut
The point is that notebooks can't be hacked
yea they can, most passwords people would keep on a notebook would be trivially bruteforceable

I guarantee my 30 character long passwords in keepass are far more secure than anything you write and have to manually type from a notebook
 

As an Amazon Associate, rpgcodex.net earns from qualifying purchases.
Back
Top Bottom