Two Type Authentication for Non-Smart phones users

[Almond Joy]

I just found out about the two type authorization and thought maybe we can have another option for users who don't have the ability to scan a QR code and use it to generate a code.

1. Add your phone number to Sythe.org
2. Every time you log on to Sythe, you will be automatically be sent a verification code to your registered number on Sythe.
3. You receive a text mesage that a code has been generated.
4. Enter code onto verification webpage and you have successfully logged on.

This will be handy for unauthorized users who have your password but the inability to log on your Sythe account because it will always ask you to enter a verification code. You'll even receive a text message of a verification code you're unaware of which you will probably reset your password or find out the reason why.

Check box " Don't ask me for another code again for another 30 days when I use this computer " should be another feature that need to be implemented. Unless your computer is infected with a RAT which is very unlikely because your computer should be virus free, this option should save you time from having to always enter a verification code. Verification code should be used for when you're not at home and you're going to log on to sythe to a different computer such as a friends laptop or library.

EDIT If it costs money to send text messages for verification code, perhaps it can be sent to the User's email. Google/Hotmail have their own two-type authentication so it would add an extra security to your account as well if your email very private and only used for Sythe.

 

[R]

Then a payment method would have to be set up, like the donation system, to pay for all the texts. There are PC apps available, Sythe said, I'm not sure of what though.

Check box " Don't ask me for another code again for another 30 days when I use this computer " should be another feature that need to be implemented. Unless your computer is infected with a RAT which is very unlikely because your computer should be virus free, this option should save you time from having to always enter a verification code.

Also that would sort of defeat the purpose of the whole 2F system, it's to stop people who are RAT infected or otherwise, being compromised on Sythe.

 

[Cas]

This costs a LOT of money.
SVU uses a system like this, and that costs 5$ per member.

Won't support this. Got a smartphone? use it.
Don't have a smartphone? Get one or use a cheap iPod that you can buy 2nd handed for like 50$.

 

[Almond Joy]

Then a payment method would have to be set up, like the donation system, to pay for all the texts. There are PC apps available, Sythe said, I'm not sure of what though.



Also that would sort of defeat the purpose of the whole 2F system, it's to stop people who are RAT infected or otherwise, being compromised on Sythe.

I didn't know there are costs for paying all the texts at all. Couldn't they use google voice number to just send out text messages?

I wouldn't mind that the verification code would be sent to my email address instead of texting. I already have two-type authentication on all my emails now.

 

[Almond Joy]

This costs a LOT of money.
SVU uses a system like this, and that costs 5$ per member.

Won't support this. Got a smartphone? use it.
Don't have a smartphone? Get one or use a cheap iPod that you can buy 2nd handed for like 50$.

Would you support if I thought of an althernative to having verfication codes being sent to your phone but perhaps to your email instead?

Hotmail and Google uses two-type authentication and it would be safer since this would most definitely cut costs of text messages to your email and adds an extra layer to your account.

 

[Cas]

Would you support if I thought of an althernative to having verfication codes being sent to your phone but perhaps to your email instead?

Hotmail and Google uses two-type authentication and it would be safer since the costs of text messages.

Nope.
2-step verification is not required on those accounts, so would be unwise to let them be used to verify.
Only the apps and texts are safe, which again, cost money.

 

[Almond Joy]

Nope.
2-step verification is not required on those accounts, so would be unwise to let them be used to verify.
Only the apps and texts are safe, which again, cost money.

It would wise to take advantage of two-type authentication on emails.. but then again, if you wanted a add an extra layer of security, two type authentication on your sythe account, you best should add a two type authentication on your email linked to your sythe. It shouldn't be required but it should be an option other than scanning a QR code.

 

[Khroniik]

There are free apps for windows that will do the same thing.

This provides less security, being that anybody with access to your pc will be able to generate a code, however it will prevent anyone with access to just your password from gaining access to your account.

Obviously, this isn't recommended if you have more than one PC, as you'd have to go back to the PC you use as your authenticator every time you log-in somewhere else.

Best app to use: http://code.google.com/p/gauth4win/

 

[Productions]

Cool idea buddy

 

[I_DONT_BOT]

By the way guys, there has been a guide made for this.

http://www.sythe.org/showthread.php?p=13008292#post13008292

 

[R]

Use that guide ^ there really aren't enough non-smart-device users to warrant an additional system.