2FA desperately needed 2BTC Bounty

[Stunna]

I know this has been posted before, but I feel this is of the utmost importance especially given the recent man-in-the-middle attack. If Theymos could quickly look into adding this, it would be much appreciated as passwords were potentially compromised recently. I'd feel much safer if given some sort of two step option.

This is especially important for the sake of protecting moderator/escrow accounts, quite a bit of damage could done if those accounts were compromised.


Thanks


EDIT: A staff account was compromised this could have been easily prevented.


EDIT2: A bounty has been created: https://bitcointalk.org/index.php?topic=364307.msg5826860#msg5826860


EDIT3: I've upped the bounty to 2BTC.

Edit4: A fix has been proposed, waiting on Theymos to check it out and potentially implement.

[hilariousandco]

Yeah, would be a good idea, but I don't know how easily or how costly it would be to implement. I also heard the forum is getting new software soon, so hopefully maybe that will/or could be a feature.

[Faince1985]

Great idea  ,specially for important commercial and administrative accounts and any account that can be potentially used to scam with. and with the hack there is an increased risk though most already changed passwords (and the possibility of future hacks).

[whiskers75]

Yeah, would be a good idea, but I don't know how easily or how costly it would be to implement. I also heard the forum is getting new software soon, so hopefully maybe that will/or could be a feature.

This is borderline easy to implement.

[hilariousandco]

Yeah, would be a good idea, but I don't know how easily or how costly it would be to implement. I also heard the forum is getting new software soon, so hopefully maybe that will/or could be a feature.

This is borderline easy to implement.

Even mobile phone verification?

[qwk]

I also heard the forum is getting new software soon

[bitmarket.io]

I also heard the forum is getting new software soon

I read that line and thought the same

[whiskers75]

Yeah, would be a good idea, but I don't know how easily or how costly it would be to implement. I also heard the forum is getting new software soon, so hopefully maybe that will/or could be a feature.

This is borderline easy to implement.

Even mobile phone verification?

Mobile verification is stupid. Authy/Google Authenticator FTW.

[hilariousandco]

Yeah, would be a good idea, but I don't know how easily or how costly it would be to implement. I also heard the forum is getting new software soon, so hopefully maybe that will/or could be a feature.

This is borderline easy to implement.

Even mobile phone verification?

Mobile verification is stupid. Authy/Google Authenticator FTW.

What's stupid about it? And I've only just quickly googled what Authy is, but if it's some kind of mobile app verification, then I suppose that's just as good.

I also heard the forum is getting new software soon

I read that line and thought the same

Care to elaborate?

[qwk]

I also heard the forum is getting new software soon

I read that line and thought the same

Care to elaborate?

For some, "soon" is equivalent to "two more weeks™",
for the forum software, "soon" is more like "two more years"

[hilariousandco]

I also heard the forum is getting new software soon

I read that line and thought the same

Care to elaborate?

For some, "soon" is equivalent to "two more weeks™",
for the forum software, "soon" is more like "two more years"

Ha, figured it may've been something along these lines. 

Is there any updates on the avatar situation?

[BadBear]

I also heard the forum is getting new software soon

I read that line and thought the same

Care to elaborate?

For some, "soon" is equivalent to "two more weeks™",
for the forum software, "soon" is more like "two more years"

Ha, figured it may've been something along these lines. 

Is there any updates on the avatar situation?

Yes I have an update. The update is that an update will be coming eventually. 

[whiskers75]

I also heard the forum is getting new software soon

I read that line and thought the same

Care to elaborate?

For some, "soon" is equivalent to "two more weeks™",
for the forum software, "soon" is more like "two more years"

Ha, figured it may've been something along these lines. 

Is there any updates on the avatar situation?

Yes I have an update. The update is that an update will be coming eventually. 

It's been so long, might as well fork NodeBB and create some new forum software xD

[Stunna]

Yes I have an update. The update is that an update will be coming eventually.  

Hah, may as well toss in an authenticator for now then. Costs nothing and would take almost no time. I believe Theymos is in university though so he's probably busy with finals, but it would be appreciated if he looked into adding this when free.

[btcton]

Yeah, I totally support this. Of course, it shouldn't be required, but it could really help us feel safer when attacks such as the last few happen. Not so much for the password, but for the account.

[stompix]

I also heard the forum is getting new software soon

I read that line and thought the same

Care to elaborate?

For some, "soon" is equivalent to "two more weeks™",
for the forum software, "soon" is more like "two more years"

Ha, figured it may've been something along these lines. 

Is there any updates on the avatar situation?

Yes I have an update. The update is that an update will be coming eventually. 

Any updates on the update time for the update?

[DeboraMeeks]

this would be a nice addon to this forum specially with the two recent attacks and the possibility that some accounts (specially in the last attack) has been compromised. making a fully updated software would be even better but on short-term adding 2FA is a priority.

Yes I have an update. The update is that an update will be coming eventually.   

update us when that update is updated 

[BadBear]

I also heard the forum is getting new software soon

I read that line and thought the same

Care to elaborate?

For some, "soon" is equivalent to "two more weeks™",
for the forum software, "soon" is more like "two more years"

Ha, figured it may've been something along these lines. 

Is there any updates on the avatar situation?

Yes I have an update. The update is that an update will be coming eventually. 

Any updates on the update time for the update?

We apologize for the lack of an update about the update. Those responsible have been sacked.

Watched too much Monty Python this weekend

[b!z]

[Stunna]

Bumping this to keep it on first page, I think this is a 100% necessary update and shouldn't be too difficult.