Bitcoin Forum

Other => Off-topic => Topic started by: Sreenath on May 18, 2018, 12:34:28 AM



Title: 2 Factor authentication safe ?
Post by: Sreenath on May 18, 2018, 12:34:28 AM
I was just reading about an old news from 2011 where  RSA (security company) said that its SecuID authentication tokens had been hacked. Ofcourse back then we had hardware device for receiving authentication codes, and these days the authentication codes comes on the mobile phone - SMS or phone call or GoogleAuth and other apps..


But the above news from 2011 got me thinking if even Google Auth app for 2FA is safe ? How is 2FA vulnerable to hackers ? Thoughts?


Title: Re: 2 Factor authentication safe ?
Post by: Cryptocoinbob on May 18, 2018, 12:42:37 AM
2FA are not the safest option, but what really concerns me is the recovery of those 2 FA set up being the biggest problem... If few weeks later you called in the company and pretended to loose the 2FA device, the recovery process today is very vulnerable to an attack. This needs to be corrected.... I dont kow the best way, but may be use biometrics for recovery ? !


Title: Re: 2 Factor authentication safe ?
Post by: stuartup57 on May 18, 2018, 12:48:11 AM
2FA are not the safest option, but what really concerns me is the recovery of those 2 FA set up being the biggest problem... If few weeks later you called in the company and pretended to loose the 2FA device, the recovery process today is very vulnerable to an attack. This needs to be corrected.... I dont kow the best way, but may be use biometrics for recovery ? !

Take the authentication process to the blockchain is the safest bet ! Sony Files Patent for Blockchain-based Multi-Factor Authentication System..

Link here for reference: https://cointelegraph.com/news/sony-files-patent-for-blockchain-based-multi-factor-authentication-system


Title: Re: 2 Factor authentication safe ?
Post by: emma crypto 1013 on May 18, 2018, 01:00:49 AM
2 factor authentication can work will smart contracts, and the world has already started to look that as a solution.. Here is an open source code for the same- https://github.com/Zuchos/tufa

A user can sign up on the application and whenever asked for 2FA code/ token verification, user just need to send token as a data to the Application's smart contract from his Ethereum account. The application reads token that was stored in smart contract and will authenticate the user.

The above will become very difficult to achieve till the ease of use part is not solved by the industry in the Ethereum address ! But seems like a secure and a possible way , overall.



Title: Re: 2 Factor authentication safe ?
Post by: Crypto hanna on May 18, 2018, 06:55:52 AM
I think 2 FA is the safest option for authentication as of now... I usually dont trade much on exchanges without a 2FA enabled


Title: Re: 2 Factor authentication safe ?
Post by: domasal on May 20, 2018, 10:23:31 AM
You have to think about simplicity as well. If it's to much effort then people won't use it, 2 FA is better than just 1 FA


Title: Re: 2 Factor authentication safe ?
Post by: CHINUYAGAV24 on May 20, 2018, 10:32:04 AM
Yes it is safe but it has a defect we cant access without our mobile since we need to check for otp


Title: Re: 2 Factor authentication safe ?
Post by: Oyetunde1 on May 20, 2018, 10:45:03 AM
Yes, very safe.... But Authy app is the best


Title: Re: 2 Factor authentication safe ?
Post by: CryptYeah on May 23, 2018, 09:11:48 AM
If you dont lose your password and you have a reliable devices, then yes.


Title: Re: 2 Factor authentication safe ?
Post by: ohniceo on May 31, 2018, 04:57:19 AM
Nothing is unhackable, but it is best to have 2FA on if you can.


Title: Re: 2 Factor authentication safe ?
Post by: kopamo on June 10, 2018, 01:28:13 PM
Yes it's very safe


Title: Re: 2 Factor authentication safe ?
Post by: Arianitt1 on June 10, 2018, 01:55:43 PM
For my opinion 2FA is the safest thing ever, I recommend using Google Auth, it's the best out there. Imagine it as extra security even if they hack it  wich is impossible they still need your password, it's safe for my opinion.