philipma1957
Legendary
Offline
Activity: 4228
Merit: 8394
'The right to privacy matters'
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 12:35:21 PM Merited by JayJuanGee (1) |
|
Microsoft Authenticator app, Windows Hello, a security key, or an SMS / email verification code instead of a password Pro tip: Never ever ever ever ever ever use SMS authentication. Why in the world do they offer that as an option??? They can't get google auth to work properly or something. Or there are certain apps like Authy that require all sorts of voodoo to work and I prefer to just get the secret code and not require this particular app. Why can't they just show the secret at the time you activate it? I mean, some legacy trading platforms and banks use SMS, and I don't mind, because they're ancient. google auth has issues if the phone breaks. sms does not have the issues. So they use sms. If you are locked out of your account due to a broken phone and have sms. Buy a new phone port the old number and you have sms working. If this happens with google auth the new google auth does not work as it will not be synched. Sms can be made secure more secure if crossed linked to an email and the email is crossed link to a password.
|
|
|
|
Dabs
Legendary
Offline
Activity: 3416
Merit: 1912
The Concierge of Crypto
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 12:48:58 PM |
|
I would not use SMS that way, personally, because, that's exactly how hackers sim swap to get into your account. If I have google auth, or the secret, I keep that stored separately. Then I can always use that to generate the new time based one time code that changes every 30 seconds.
I actually don't use a phone or mobile device for my google auth codes, I use a separate computer. I'm compromising in other forms of security but generally it's still better than what most people use or do.
Don't break your phone, or make sure you have the secret so you can easily use it on any other phone or device.
|
|
|
|
ChartBuddy
Legendary
Online
Activity: 2282
Merit: 1800
1CBuddyxy4FerT3hzMmi1Jz48ESzRw1ZzZ
|
![](https://bitcointalk.org/Themes/custom1/images/post/lamp.gif) |
September 16, 2021, 01:01:26 PM |
|
|
|
|
|
psycodad
Legendary
Offline
Activity: 1630
Merit: 1708
精神分析的爸
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 01:08:24 PM Last edit: September 16, 2021, 01:44:34 PM by psycodad Merited by vapourminer (1), JayJuanGee (1) |
|
google auth has issues if the phone breaks.
sms does not have the issues. So they use sms.
If you are locked out of your account due to a broken phone and have sms. Buy a new phone port the old number and you have sms working.
If this happens with google auth the new google auth does not work as it will not be synched.
Sms can be made secure more secure if crossed linked to an email and the email is crossed link to a password.
I am not a smart phone user so my question may be dumb, apologies then. But what keeps you from backing up your 2FA OTP key in a safe place and just restoring it on the new phone? I mean it's a pretty short character string that even can be handwritten on a post-it (pun intended). SMS ist just unsafe and dangerous for such sensitive things in todays world. [EDIT]: I just realized what I wrote above when I said "I am not a smart phone user", I actually meant "I am not a smartphone user". But since both apply equally well to me I'll stick with the first one ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
Dabs
Legendary
Offline
Activity: 3416
Merit: 1912
The Concierge of Crypto
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 01:31:59 PM |
|
google auth has issues if the phone breaks.
sms does not have the issues. So they use sms.
If you are locked out of your account due to a broken phone and have sms. Buy a new phone port the old number and you have sms working.
If this happens with google auth the new google auth does not work as it will not be synched.
Sms can be made secure more secure if crossed linked to an email and the email is crossed link to a password.
I am not a smart phone user so my question may be dumb, apologies then. But what keeps you from backing up your 2FA OTP key in a safe place and just restoring it on the new phone? I mean it's a pretty short character string that even can be handwritten on a post-it (pun intended). SMS ist just unsafe and dangerous for such sensitive things in todays world. That's what I do. I keep the secret or the 2FA key. Some sites force you to scan a QR code, so I scan it using a third party QR code scanner to get the secret, and then I back that up. Most or all sites require you to type in the 6 digit code to confirm activation of 2FA. Some are just hard headed and insist on a particular app like MS or Authy, and for those, I haven't really found a work-around and just don't do it; it's not that important to me. I do send them an email to use time based codes and not lock in to a particular app, or to at least give me the secret.
|
|
|
|
Paashaas
Legendary
Offline
Activity: 3514
Merit: 4560
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 01:42:51 PM Last edit: September 16, 2021, 03:00:00 PM by Paashaas Merited by El duderino_ (21), infofront (1) |
|
Enjoying my first and well deserved retirement vacation after lockdown and kids summercamp. I'm in Kos island, Greece. The mountains at the background is Turkey. ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.ibb.co%2FC5PP6Fq%2FIMG-20210916-WA0002.jpg&t=665&c=rPpn7vDCVXVIUA)
|
|
|
|
Richy_T
Legendary
Offline
Activity: 2534
Merit: 2243
1RichyTrEwPYjZSeAYxeiFBNnKC9UjC5k
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 01:57:03 PM |
|
Microsoft Authenticator app, Windows Hello, a security key, or an SMS / email verification code instead of a password Pro tip: Never ever ever ever ever ever use SMS authentication. Why in the world do they offer that as an option??? Microsoft has always been about convenience over security. It's only other OSs offering better and beginning to gain interest that forced them to take things at all seriously. And even then you end up with an abomination like UAC.
|
|
|
|
ChartBuddy
Legendary
Online
Activity: 2282
Merit: 1800
1CBuddyxy4FerT3hzMmi1Jz48ESzRw1ZzZ
|
![](https://bitcointalk.org/Themes/custom1/images/post/lamp.gif) |
September 16, 2021, 02:01:25 PM |
|
|
|
|
|
fr4nkthetank
Legendary
Offline
Activity: 2294
Merit: 1182
Now the money is free, and so the people will be
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 02:21:18 PM |
|
what a way to wake up in the morning : "Yesterday we learned that one of our employees purchased items that they knew were set to display on our front page before they appeared there publicly. This is incredibly disappointing. We want to be clear that this behavior does not represent our values as a team" Wow, opensea, what a SURPRISE, that employees (including literally top management, Nate Chastain, Head of Product of all positions) fucked over everyone. I am surprised and shocked, dare I say SHOCKED, to see that the platform fucks over people buying NFT's for personal profit. Shocked I say /s
|
|
|
|
fr4nkthetank
Legendary
Offline
Activity: 2294
Merit: 1182
Now the money is free, and so the people will be
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 02:26:16 PM |
|
Also would like to revisit an old article from early this month which states "Researchers from the University of Texas have raised fresh concerns regarding Block.one’s record $4.362-billion ICO for the EOS blockchain in 2017 and 2018.(...)First, it directly manipulated EOS’s offering price upward through the extra buying and inflated the market value of the token. Second, it created the false impression of value of the token which enticed others to want to purchase the ICO token"
So 40% of the ICO was wash trades, for 1.2 million ETH, to pump the price and create an illusion of activity to entice people to buy it. Everybody knows about this strategy.
But can we pump before the reckoning pls ?
|
|
|
|
jojo69
Legendary
Offline
Activity: 3276
Merit: 4522
diamond-handed zealot
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 02:32:26 PM |
|
what a way to wake up in the morning : "Yesterday we learned that one of our employees purchased items that they knew were set to display on our front page before they appeared there publicly. This is incredibly disappointing. We want to be clear that this behavior does not represent our values as a team" Wow, opensea, what a SURPRISE, that employees (including literally top management, Nate Chastain, Head of Product of all positions) fucked over everyone. I am surprised and shocked, dare I say SHOCKED, to see that the platform fucks over people buying NFT's for personal profit. Shocked I say /s
![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fwww.immunetoboredom.com%2Fwp-content%2Fuploads%2F2015%2F05%2Fshocked.jpg&t=665&c=owKIR0CnaP4htg)
|
|
|
|
ChartBuddy
Legendary
Online
Activity: 2282
Merit: 1800
1CBuddyxy4FerT3hzMmi1Jz48ESzRw1ZzZ
|
![](https://bitcointalk.org/Themes/custom1/images/post/lamp.gif) |
September 16, 2021, 03:01:35 PM |
|
|
|
|
|
hisslyness
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 03:25:34 PM Merited by JayJuanGee (3) |
|
Finally got my Lightning Node Running!
8DegreesWO
I ended up using a minimal installation of CentOS (NO GUI). Had to learn a bunch of new commands. no ifconfig/netstat/ntpupdate... crazy!
Ended up going 2 x 1TB SSD (Mid Range WD) and RAID1 (Software RAID). One massive root (/) partition and no SWAP. System takes about 5 Seconds to boot up.
I didn't op for TOR Services as i wasn't too worried about hiding my IP/Location and i wanted other public nodes to be able to connect back to me without having to first initiate the connection. Hence, Port Forward is enabled.
Still checking all the possible options in lnd.conf, but overall the basics are done!
I have downloaded 65GB of the Bitcoin Blockchain (Approx. 4 Hours). Using Bitcoin Core.
Planning to fund it with about 0.3BTC as i have that floating around in coinbase.
Will start with 8 Channels of about 500,000SAT to 5,000,000SAT. Love to get this WO LN Mesh up and running!
I have to admit i do miss using command line interface.
|
|
|
|
bitcoinPsycho
Legendary
Offline
Activity: 2590
Merit: 2312
$120000 in 2024 Confirmed
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 03:46:37 PM |
|
Enjoying my first and well deserved retirement vacation after lockdown and kids summercamp. I'm in Kos island, Greece. The mountains at the background is Turkey. ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.ibb.co%2FC5PP6Fq%2FIMG-20210916-WA0002.jpg&t=665&c=rPpn7vDCVXVIUA) Nice 🍸🍺🍺🍻
|
|
|
|
Torque
Legendary
Offline
Activity: 3668
Merit: 5232
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 03:51:54 PM Last edit: September 16, 2021, 04:02:42 PM by Torque Merited by JayJuanGee (2), vapourminer (1) |
|
I would not use SMS that way, personally, because, that's exactly how hackers sim swap to get into your account. If I have google auth, or the secret, I keep that stored separately. Then I can always use that to generate the new time based one time code that changes every 30 seconds.
I actually don't use a phone or mobile device for my google auth codes, I use a separate computer. I'm compromising in other forms of security but generally it's still better than what most people use or do.
Don't break your phone, or make sure you have the secret so you can easily use it on any other phone or device.
Precisely. I actually do use a dedicated tablet for that separate from my phone and other computers. It stays turned off and stored in a secured/locked, non-disclosed location when not needed, and I only turn on wifi for about 1 minute only to re-sync the google auth codes when needed every few months when I use it, and then turn wifi right back off again. The secret is stored offline and secured. I do all crypto related activity on a desktop only (with a hardware wallet), not on a phone. Actually never on a phone. It boggles my mind that most crypto people I read about do everything, including crypto wallet storage and also authentication to their crypto accounts, all on one single device: their phone. Are they fkn stupid? It's almost like they want to get phished/hacked/scammed out of their crypto. I will say one thing though: we will never achieve mass adoption of Bitcoin until storing and using crypto is as easy as having and using a bank account online. The masses will never jump through all these technological hoops in order to adopt bitcoin. They are too afraid of fucking something up and getting hacked.
|
|
|
|
ChartBuddy
Legendary
Online
Activity: 2282
Merit: 1800
1CBuddyxy4FerT3hzMmi1Jz48ESzRw1ZzZ
|
![](https://bitcointalk.org/Themes/custom1/images/post/lamp.gif) |
September 16, 2021, 04:01:24 PM |
|
|
|
|
|
El duderino_
Legendary
Offline
Activity: 2618
Merit: 12756
BTC + Crossfit, living life.
|
|
|
|
|
El duderino_
Legendary
Offline
Activity: 2618
Merit: 12756
BTC + Crossfit, living life.
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 04:12:36 PM Merited by JayJuanGee (1) |
|
|
|
|
|
Dabs
Legendary
Offline
Activity: 3416
Merit: 1912
The Concierge of Crypto
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 04:14:15 PM Merited by JayJuanGee (1) |
|
I would not use SMS that way, personally, because, that's exactly how hackers sim swap to get into your account. If I have google auth, or the secret, I keep that stored separately. Then I can always use that to generate the new time based one time code that changes every 30 seconds.
I actually don't use a phone or mobile device for my google auth codes, I use a separate computer. I'm compromising in other forms of security but generally it's still better than what most people use or do.
Don't break your phone, or make sure you have the secret so you can easily use it on any other phone or device.
Precisely. I actually do use a dedicated tablet for that separate from my phone and other computers. It stays turned off and stored in a secured/locked, non-disclosed location when not needed, and I only turn on wifi for about 1 minute only to re-sync the google auth codes when needed every few months when I use it, and then turn wifi right back off again. The secret is stored offline and secured. I do all crypto related activity on a desktop only (with a hardware wallet), not on a phone. Actually never on a phone. It boggles my mind that most crypto people I read about do everything, including crypto wallet storage and also authentication to their crypto accounts, all on one single device: their phone. Are they fkn stupid? It's almost like they want to get phished/hacked/scammed out of their crypto. I will say one thing though: we will never achieve mass adoption of Bitcoin until storing and using crypto is as easy as having and using a bank account online. The masses will never jump through all these technological hoops in order to adopt bitcoin. They are too afraid of fucking something up and getting hacked. I do similarly, but I understand you can do the same thing with two phones, or two tablets, one being the cold storage and always kept offline. I just don't like to compose or draft my transactions from a phone because it does not offer the same settings? or granularity or whatever that I prefer compared to doing it on the desktop. (Using Electrum.)
|
|
|
|
Elwar
Legendary
Offline
Activity: 3598
Merit: 2386
Viva Ut Vivas
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 16, 2021, 04:27:47 PM Merited by hisslyness (1) |
|
Finally got my Lightning Node Running!
8DegreesWO
I ended up using a minimal installation of CentOS (NO GUI). Had to learn a bunch of new commands. no ifconfig/netstat/ntpupdate... crazy!
Ended up going 2 x 1TB SSD (Mid Range WD) and RAID1 (Software RAID). One massive root (/) partition and no SWAP. System takes about 5 Seconds to boot up.
I didn't op for TOR Services as i wasn't too worried about hiding my IP/Location and i wanted other public nodes to be able to connect back to me without having to first initiate the connection. Hence, Port Forward is enabled.
Still checking all the possible options in lnd.conf, but overall the basics are done!
I have downloaded 65GB of the Bitcoin Blockchain (Approx. 4 Hours). Using Bitcoin Core.
Planning to fund it with about 0.3BTC as i have that floating around in coinbase.
Will start with 8 Channels of about 500,000SAT to 5,000,000SAT. Love to get this WO LN Mesh up and running!
I have to admit i do miss using command line interface.
I set up my first Umbrel node. I too would like to join this WO LN hub.
|
|
|
|
|