Keep your 2FA backup code safe!

Discussion in 'Sythe.Org News' started by Sythe, Jun 24, 2014.

Thread Status:
Not open for further replies.
Keep your 2FA backup code safe!
  1. Unread #1 - Jun 24, 2014 at 8:36 PM
  2. Sythe
    Joined:
    Apr 21, 2005
    Posts:
    8,063
    Referrals:
    444
    Sythe Gold:
    5,161
    Discord Unique ID:
    742989175824842802
    Discord Username:
    Sythe
    Dolan Duck Dolan Trump Supporting Business ???
    Poképedia
    Clefairy Jigglypuff
    Who did this to my freakin' car!
    Hell yeah boooi
    Tier 3 Prizebox Toast Wallet User
    I'm LAAAAAAAME Rust Player Mewtwo Mew Live Free or Die Poké Prizebox (42) Dat Boi

    Sythe Join our discord

    test

    Administrator Village Drunk

    Keep your 2FA backup code safe!

    I've had numerous users losing their phones who haven't written down their backup codes. This makes it impossible to recover your account unless you are an SVU user, as I have no way to verify your identity.

    Write down your 2FA backup code!

    If you have foolishly lost your backup code and currently have 2FA enabled, I strongly suggest deactivating 2FA on your account and then re-activating it, and write the backup code down this time and keep it in your wallet.

    If you write to me to say you've lost your phone and your backup code and you don't have SVU I will write back to say you need to start a new sythe account.

    Serious stuff is serious. You have been warned.
     
  3. Unread #2 - Jun 24, 2014 at 8:38 PM
  4. Shin
    Joined:
    Mar 10, 2007
    Posts:
    14,171
    Referrals:
    23
    Sythe Gold:
    196
    Discord Unique ID:
    777373911821713408
    Pool Shark (4) Village Drunk <3 n4n0 (29) Battleship Champion

    Shin Join the Sythe.org Discord
    Retired Administrator Legendary Mudkips $100 USD Donor

    Keep your 2FA backup code safe!

    This makes sense. I don't understand why someone would enable 2FA in the first place without saving their backup code.

    Has it been creating a lot of havoc / wasted time?
     
  5. Unread #3 - Jun 24, 2014 at 8:38 PM
  6. SuF
    Joined:
    Jan 21, 2007
    Posts:
    14,212
    Referrals:
    28
    Sythe Gold:
    1,234
    Discord Unique ID:
    203283096668340224
    <3 n4n0 Two Factor Authentication User Community Participant Spam Forum Participant Sythe's 10th Anniversary

    SuF Legend
    Pirate Retired Global Moderator

    Keep your 2FA backup code safe!

    Why don't you put this warning in massive bold lettering when you enable it? (If it is not already).
     
  7. Unread #4 - Jun 24, 2014 at 8:46 PM
  8. Sythe
    Joined:
    Apr 21, 2005
    Posts:
    8,063
    Referrals:
    444
    Sythe Gold:
    5,161
    Discord Unique ID:
    742989175824842802
    Discord Username:
    Sythe
    Dolan Duck Dolan Trump Supporting Business ???
    Poképedia
    Clefairy Jigglypuff
    Who did this to my freakin' car!
    Hell yeah boooi
    Tier 3 Prizebox Toast Wallet User
    I'm LAAAAAAAME Rust Player Mewtwo Mew Live Free or Die Poké Prizebox (42) Dat Boi

    Sythe Join our discord

    test

    Administrator Village Drunk

    Keep your 2FA backup code safe!

    Most people who lose access have had SVU and can be recovered but I've had to turn away at least two people. In total about 10 have needed it removed since we implemented it.

    Email and password are together a single factor (because password can be recovered by email.) I necessarily need a second factor (a second piece of information proving your ownership of the account) to disable 2FA from a sythe account otherwise it would invalidate the purpose of 2FA.

    Frankly it is the user's responsibility to follow the 2FA instructions. They are painfully clear and simple to follow when enabling.
     
  9. Unread #5 - Jun 24, 2014 at 8:50 PM
  10. SuF
    Joined:
    Jan 21, 2007
    Posts:
    14,212
    Referrals:
    28
    Sythe Gold:
    1,234
    Discord Unique ID:
    203283096668340224
    <3 n4n0 Two Factor Authentication User Community Participant Spam Forum Participant Sythe's 10th Anniversary

    SuF Legend
    Pirate Retired Global Moderator

    Keep your 2FA backup code safe!

    Why not just only let SVU users use it?
     
  11. Unread #6 - Jun 24, 2014 at 8:57 PM
  12. Sythe
    Joined:
    Apr 21, 2005
    Posts:
    8,063
    Referrals:
    444
    Sythe Gold:
    5,161
    Discord Unique ID:
    742989175824842802
    Discord Username:
    Sythe
    Dolan Duck Dolan Trump Supporting Business ???
    Poképedia
    Clefairy Jigglypuff
    Who did this to my freakin' car!
    Hell yeah boooi
    Tier 3 Prizebox Toast Wallet User
    I'm LAAAAAAAME Rust Player Mewtwo Mew Live Free or Die Poké Prizebox (42) Dat Boi

    Sythe Join our discord

    test

    Administrator Village Drunk

    Keep your 2FA backup code safe!

    It should be possible to have a secure sythe account without donating. We run as a donation model but we are also free-to-use. Account security is not something to be held hostage for donations. It's not a perk, it's an essential feature. The more users collectively using 2FA the safer the entire site is.
     
  13. Unread #7 - Jun 24, 2014 at 9:01 PM
  14. SuF
    Joined:
    Jan 21, 2007
    Posts:
    14,212
    Referrals:
    28
    Sythe Gold:
    1,234
    Discord Unique ID:
    203283096668340224
    <3 n4n0 Two Factor Authentication User Community Participant Spam Forum Participant Sythe's 10th Anniversary

    SuF Legend
    Pirate Retired Global Moderator

    Keep your 2FA backup code safe!

    How very non-wallstreet of you. Making people not trade with imposters would likely help more. I envision a page that you can put a Skype in to see if it is legit or fake. Or any other account. Fuzzy search would be glorious.
     
  15. Unread #8 - Jun 24, 2014 at 9:06 PM
  16. Sythe
    Joined:
    Apr 21, 2005
    Posts:
    8,063
    Referrals:
    444
    Sythe Gold:
    5,161
    Discord Unique ID:
    742989175824842802
    Discord Username:
    Sythe
    Dolan Duck Dolan Trump Supporting Business ???
    Poképedia
    Clefairy Jigglypuff
    Who did this to my freakin' car!
    Hell yeah boooi
    Tier 3 Prizebox Toast Wallet User
    I'm LAAAAAAAME Rust Player Mewtwo Mew Live Free or Die Poké Prizebox (42) Dat Boi

    Sythe Join our discord

    test

    Administrator Village Drunk

    Keep your 2FA backup code safe!

    Or people could request a PM like they have always been advised to.

    Further, skype is decidedly insecure. Just because the person you are chatting with has the exact same skype-id as is written on a sythe user's profile that does not guarantee that they are the same person. Skype is one of the most frequently hacked services on the internet.

    Requesting a PM is the only guaranteed way to protect yourself against impostors.

    SuF, your attitude does you no justice. Pull your head out and consider for a moment that the decisions made by others might actually be the right decision.
     
  17. Unread #9 - Jun 24, 2014 at 9:17 PM
  18. SuF
    Joined:
    Jan 21, 2007
    Posts:
    14,212
    Referrals:
    28
    Sythe Gold:
    1,234
    Discord Unique ID:
    203283096668340224
    <3 n4n0 Two Factor Authentication User Community Participant Spam Forum Participant Sythe's 10th Anniversary

    SuF Legend
    Pirate Retired Global Moderator

    Keep your 2FA backup code safe!

    You seem to have inconsistent logic.

    I also do not see why you think that about my attitude. I'm a hardcore INTJ (Yes I know that system is very flawed). Nothing is perfect and everything can be improved. Why do people take such offense to others trying to help them improve?

    tl;dr; Sorry I don't give a shit about authority or your feelings. Efficiency and correctness and it actually working are far more important than either of those things.
     
  19. Unread #10 - Jun 24, 2014 at 9:22 PM
  20. Sythe
    Joined:
    Apr 21, 2005
    Posts:
    8,063
    Referrals:
    444
    Sythe Gold:
    5,161
    Discord Unique ID:
    742989175824842802
    Discord Username:
    Sythe
    Dolan Duck Dolan Trump Supporting Business ???
    Poképedia
    Clefairy Jigglypuff
    Who did this to my freakin' car!
    Hell yeah boooi
    Tier 3 Prizebox Toast Wallet User
    I'm LAAAAAAAME Rust Player Mewtwo Mew Live Free or Die Poké Prizebox (42) Dat Boi

    Sythe Join our discord

    test

    Administrator Village Drunk

    Keep your 2FA backup code safe!

    Frankly your attitude is basically "I have most of an I.T. degree, therefore my opinion is the correct opinion." Get over yourself. Three of our long term staff members including myself have better qualifications than you do.

    I'm happy to receive legitimate suggestions but dial it back a bit. Don't try to tell us our job. If you are unhappy with something or think we're doing it wrong then open a Socratic dialogue. You might find actually that there are good non-obvious reasons for the way we do certain things.
     
  21. Unread #11 - Jun 24, 2014 at 9:33 PM
  22. SuF
    Joined:
    Jan 21, 2007
    Posts:
    14,212
    Referrals:
    28
    Sythe Gold:
    1,234
    Discord Unique ID:
    203283096668340224
    <3 n4n0 Two Factor Authentication User Community Participant Spam Forum Participant Sythe's 10th Anniversary

    SuF Legend
    Pirate Retired Global Moderator

    Keep your 2FA backup code safe!

    Argument from authority. My CS degree is just a piece of paper I need to have to work where I want to. Nothing more. I've offered a legitimate suggestion and you've just offered excuses and fallacies. I'm not sure why you are being so defensive.
     
  23. Unread #12 - Jun 24, 2014 at 9:45 PM
  24. Sythe
    Joined:
    Apr 21, 2005
    Posts:
    8,063
    Referrals:
    444
    Sythe Gold:
    5,161
    Discord Unique ID:
    742989175824842802
    Discord Username:
    Sythe
    Dolan Duck Dolan Trump Supporting Business ???
    Poképedia
    Clefairy Jigglypuff
    Who did this to my freakin' car!
    Hell yeah boooi
    Tier 3 Prizebox Toast Wallet User
    I'm LAAAAAAAME Rust Player Mewtwo Mew Live Free or Die Poké Prizebox (42) Dat Boi

    Sythe Join our discord

    test

    Administrator Village Drunk

    Keep your 2FA backup code safe!

    You're an abrasive and unpleasant person to deal with, and apparently cannot read. Please return to my earlier posts for the reason that a searchable database of skype-ids is a bad idea and would create a false-sense of security. Users need to request a PM to prove they are in possession of the claimed sythe account. A skype id is insufficient evidence that someone is who they claim they are.
     
< Sythe Prizeboxes | New Head Middleman! >

Users viewing this thread
1 guest
Thread Status:
Not open for further replies.


 
 
Adblock breaks this site