Two step verification

I think the digital currency implantation will go large on Sythe after a while. This automatically brings tons of scammer, hackers, and other assholes to our community who're trying to steal all wealth we've stored on this forum.

A simple, but very effective, method to keep Sythe safe for everybody will be a two-step authorization. For people who don't know:

Two-factor authentication is a security process in which the user provides two means of identification, one of which is typically a physical token, such as a card, and the other of which is typically something memorized, such as a security code. In this context, the two factors involved are sometimes spoken of as something you have and something you know. A common example of two-factor authentication is a bank card: the card itself is the physical item and the personal identification number (PIN) is the data that goes with it.

According to proponents, two-factor authentication could drastically reduce the incidence of online identity theft, phishing expeditions, and other online fraud, because the victim's password would no longer be enough to give a thief access to their information. Opponents argue (among other things) that, should a thief have access to your computer, he can boot up in safe mode, bypass the physical authentication processes, scan your system for all passwords and enter the data manually, thus -- at least in this situation -- making two-factor authentication no more secure than the use of a password alone.

Some security procedures now require three-factor authentication, which involves possession of a physical token and a password, used in conjunction with biometric data, such as fingerscanning or a voiceprint.

Source

A quick search on the web brought me to VoxImplant who apparently is a party who can help implant this into Sythe. I've not done much research which option would be best, I'm sure this isn't to hard if we decide to go with my suggestion.

We can give users different options for Two-step verification usage, some suggestions:
- On login
- Sending currencies
- Take currencies out of wallet

Discus please

 

I believe that once the wallet is implemented, we do need something like 2 FA.

 

I agree. It should at the very least be like Facebook whereby if a user logs in using an IP from an unfamiliar location, they have to verify themselves. Requiring verification when sending payments would work too though.

 

[Cas]

Agreed, this is a needed change to keep the Sythe accounts and balance (even if it's only a few dollars) secure.

What's 2 FA R2? Google search brings up some kind of drug lol.

Cheers!

 

[n4n0]

Agreed, this is a needed change to keep the Sythe accounts and balance (even if it's only a few dollars) secure.

What's 2 FA R2? Google search brings up some kind of drug lol.

Cheers!

2FA = Two Factor authentication.

On topic - you realize this type of service normally is not cheap at all, right?

 

2FA = Two Factor authentication.

On topic - you realize this type of service normally is not cheap at all, right?

Didn't looked at the costs yet. Could it be an idea to pay this from payment process fees or so? I don't mind paying a 1% fee while knowing my storage is more safe.

Cheers!

 

[n4n0]

Didn't looked at the costs yet. Could it be an idea to pay this from payment process fees or so? I don't mind paying a 1% fee while knowing my storage is more safe.

Cheers!

Ultimately this would be a question that only Sythe and/or Matthew would be responsible for answering.

 

I'm sure the security we use for admin accounts is around 3$/month/member to give you a rough idea

 

I'm sure the security we use for admin accounts is around 3$/month/member to give you a rough idea

Benefit for $200,-+ donators or something like it?

EDIT: Might be a wise idea to sell this extra form of protection with a Paypal subscription of $5,- monthly? Could be made a buck here for all work done

Cheers!

 

[frinx]

You want every new member to show ID? That will put many members off.

 

You want every new member to show ID? That will put many members off.

Read before posting please. It's about Two factor login protection, this has nothing to do with showing a copy of your ID.

Cheers!

 

[n4n0]

You want every new member to show ID? That will put many members off.

You obviously didn't read the thread.

 

[frinx]

I read it but I not understand it I guess.

 

[n4n0]

I read it but I not understand it I guess.

Two factor authentication is a second layer of protection that gets added to an account. For example, gmail offers two factor authentication. They have the standard password which is the first factor, then SMS verification, which is the second factor. It's an extra layer of security against hacking.

 

I would be in support of this, it might also be reassuring to new members who are attracted by this new feature, in addition to it being secure with an extra layer of security.

Sythe/Matthew may have considered adding an extra layer upon this new feature going live perhaps, just have to wait for their input.

 

[n4n0]

I would be in support of this, it might also be reassuring to new members who are attracted by this new feature, in addition to it being secure with an extra layer of security.

Sythe/Matthew may have considered adding an extra layer upon this new feature going live perhaps, just have to wait for their input.

Trust me. It's been considered.

 

[Cas]

Trust me. It's been considered.

You obviously know something about 2-step verification, is using Google authentication App on your phone not cheaper than using text messages?
Basically the same thing, only thing you need is a smarthphone with Microsoft OS, iOS or Android.

Cheers!

 

[Arcus Isidar]

phone verification would be the safest possible

 

[n4n0]

You obviously know something about 2-step verification, is using Google authentication App on your phone not cheaper than using text messages?
Basically the same thing, only thing you need is a smarthphone with Microsoft OS, iOS or Android.

Cheers!

Google also has the money to support running this service. We however, would have to pay for a service. Admin accounts are already protected by Duo security, which would be expensive to open up to everyone.

 

[Cas]

Google also has the money to support running this service. We however, would have to pay for a service. Admin accounts are already protected by Duo security, which would be expensive to open up to everyone.

That's not really what I meant.
For example btc-e.com verifications:

I get that it costs money, but my question was wouldn't this way be cheaper/better.
no phone number at all there, just the app-thingy, because for the use of that kind of app (Authy on iOS for example) already confirms the phone to that user.

Cheers!