Author Topic: 2FA Weakness  (Read 1359 times)

ergophobe

  • Inner Core
  • Hero Member
  • *
  • Posts: 4443
    • View Profile
Re: 2FA Weakness
« Reply #15 on: August 22, 2018, 03:08:14 PM »
Do they even have a free version?

Free for up to 10 users and without advanced features
https://duo.com/pricing

bill

  • Devil's Avocado
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1281
  • Avast!
    • View Profile
    • Email
Re: 2FA Weakness
« Reply #16 on: August 29, 2018, 01:56:50 AM »
Hmm. They were acquired by Cisco, and to get the 'free' version you have to provide them with a ton of private information so that you can run thru the 30 trial of the more advanced feature set...before it will revert to the simpler free version.

Might look into OpenOTP or other open source alternatives before I would go with Duo as there's no syncing feature on any of them that I can see.

ukgimp

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1946
    • View Profile
Re: 2FA Weakness
« Reply #17 on: August 29, 2018, 08:55:22 AM »
Surely the syncing is where the risk comes in.

bill

  • Devil's Avocado
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1281
  • Avast!
    • View Profile
    • Email
Re: 2FA Weakness
« Reply #18 on: August 30, 2018, 12:50:56 AM »
Yeah. That's probably the best feature and its Achilles heel.

Not being able to transfer 2FA tokens between devices certainly improves security, but setting up 100 or so accounts on multiple devices is unwieldy. Probably best to separate critical 2FA from my Authy profile and return to the more secure clients for those.

rcjordan

  • I'm consulting the authorities on the subject
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 7349
  • Debbie says...
    • View Profile
Re: 2FA Weakness
« Reply #19 on: August 31, 2018, 01:06:43 AM »
Big G pushing these:

Protect your online accounts with Titan Security Keys

https://www.blog.google/technology/safety-security/protect-your-online-accounts-titan-security-keys/

gm66

  • Inner Core
  • Hero Member
  • *
  • Posts: 971
    • View Profile
Re: 2FA Weakness
« Reply #20 on: October 01, 2018, 05:02:23 PM »
Don't trust anything invented by Kim Dotcom ;+}

Strong passwords for the win!
Civilisation is a race between disaster and education ...

ergophobe

  • Inner Core
  • Hero Member
  • *
  • Posts: 4443
    • View Profile
Re: 2FA Weakness
« Reply #21 on: October 01, 2018, 06:05:44 PM »
Big G pushing these:
Protect your online accounts with Titan Security Keys

Did we already mention here that Google now requires these of their employees. All work computers require a physical fob and they say it has brought the number of compromised accounts close to zero.

I don't doubt it. With every security measure, it's a convenience/security tradeoff. Everyone has to find their comfort level