BitShares Forum

Main => Technical Support => Topic started by: Akado on September 07, 2015, 12:33:46 am

Title: We might finally have stuff like Authy 2FA on BitShares
Post by: Akado on September 07, 2015, 12:33:46 am
In the last hangout BM mentioned he is working on support for 2 factor authenticator providers. I'm sure someone already mentioned in the past, that Authy would be awesome, but the forum's search tool is just bad and I can't find it.

26:15
https://soundcloud.com/beyond-bitcoin-hangouts/beyond-bitcoin-hangout-9-04-2015-s3

"...So if you want to be a 2 factor authentication provider, we're will have a standardized protocol so the wallet can work with any number of 2 factor providers..."

"...there is nothing implemented with respect to 2 factor authentication although I did talk to a significant 2 factor provider and they're very interested in helping implementing an API that will work with what we want to do..."

I would ask you to share which provider it is but at this time it sounds too premature and kind of pointless so let's continue with the mystery. What matters is that we're going to have one more awesome feature.  8)
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: clayop on September 07, 2015, 12:45:35 am
https://github.com/cryptonomex/graphene/wiki/Wallet%202-Factor%20Authentication%20Protocol
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: liondani on September 07, 2015, 12:55:31 am
When this happens we are ready for mass adoption !!!  Average Joe will ... run to us !!!  (and not only the crypto "nerds")

look here @clayop https://developers.yubico.com/


(https://s3-eu5.ixquick.com/cgi-bin/serveimage?url=http%3A%2F%2Farchive.evenews24.com%2Fwp-content%2Fuploads%2F2011%2F02%2FAVERAGE_JOE.jpg&sp=186a22cfb930071abb6e7482f9d4d7b3)
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: luckybit on September 07, 2015, 01:17:45 am
Why only 2 factor and not multi-factor? If the security of Bitshares is less than the security on exchanges then people will use exchanges.

On the other hand I also know there is an slight deadline for 2.0 so I suppose it's better to release with 2 factor in October than to delay over it. I just think this should be a priority for future releases.

https://blog.perfectcloud.io/two-factor-vs-multi-factor-authentication-a-stark-difference-2/
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: clout on September 07, 2015, 01:34:17 am
Why only 2 factor and not multi-factor? If the security of Bitshares is less than the security on exchanges then people will use exchanges.

On the other hand I also know there is an slight deadline for 2.0 so I suppose it's better to release with 2 factor in October than to delay over it. I just think this should be a priority for future releases.

https://blog.perfectcloud.io/two-factor-vs-multi-factor-authentication-a-stark-difference-2/

What exchange uses multifactor authentication?
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: BunkerChainLabs-DataSecurityNode on September 07, 2015, 02:19:03 am
Why only 2 factor and not multi-factor? If the security of Bitshares is less than the security on exchanges then people will use exchanges.

On the other hand I also know there is an slight deadline for 2.0 so I suppose it's better to release with 2 factor in October than to delay over it. I just think this should be a priority for future releases.

https://blog.perfectcloud.io/two-factor-vs-multi-factor-authentication-a-stark-difference-2/

Worker proposal for later.. most likely from an auth provider offering multi.
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: Akado on September 07, 2015, 09:45:59 am
Why only 2 factor and not multi-factor? If the security of Bitshares is less than the security on exchanges then people will use exchanges.

On the other hand I also know there is an slight deadline for 2.0 so I suppose it's better to release with 2 factor in October than to delay over it. I just think this should be a priority for future releases.

https://blog.perfectcloud.io/two-factor-vs-multi-factor-authentication-a-stark-difference-2/

Well we don't need to have it on launch I guess, but could be implemented after through worker proposals like Data said. A stable functioning wallet is what we need. I think it can hold itself without multifactor authentication for a while, given that most wallets (if any) even have 2fa.

This looks like a good comparison to Maslow's pyramid https://en.wikipedia.org/wiki/Maslow%27s_hierarchy_of_needs

Psycological: basic survival stuff, like food, sleep, etc. I would compare this with a stable working client that can be used by anyone
Safety: Like the word itself implies, security. Make it so that the wallet is safe to use. Self explanatory.
Love and belonging: I would say this is Networking. Developing relationships with others. I.e. Partnerships, Referral program
Esteem: to gain recognition by others. When BitShares is more developed and more users migrate to BitShares
Self-actualization: realization of the ful potential. When bigger companies with access to the masses finally notice BitShares and how they could use it. Mass adoption

(https://upload.wikimedia.org/wikipedia/commons/thumb/3/33/MaslowsHierarchyOfNeeds.svg/675px-MaslowsHierarchyOfNeeds.svg.png)

So I'd say we are at the psychological level once we launch. Then next months should be focusing on improving safety while we develop partnerships.
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: BunkerChainLabs-DataSecurityNode on September 07, 2015, 02:01:48 pm
Why only 2 factor and not multi-factor? If the security of Bitshares is less than the security on exchanges then people will use exchanges.

On the other hand I also know there is an slight deadline for 2.0 so I suppose it's better to release with 2 factor in October than to delay over it. I just think this should be a priority for future releases.

https://blog.perfectcloud.io/two-factor-vs-multi-factor-authentication-a-stark-difference-2/

Well we don't need to have it on launch I guess, but could be implemented after through worker proposals like Data said. A stable functioning wallet is what we need. I think it can hold itself without multifactor authentication for a while, given that most wallets (if any) even have 2fa.

This looks like a good comparison to Maslow's pyramid https://en.wikipedia.org/wiki/Maslow%27s_hierarchy_of_needs

Psycological: basic survival stuff, like food, sleep, etc. I would compare this with a stable working client that can be used by anyone
Safety: Like the word itself implies, security. Make it so that the wallet is safe to use. Self explanatory.
Love and belonging: I would say this is Networking. Developing relationships with others. I.e. Partnerships, Referral program
Esteem: to gain recognition by others. When BitShares is more developed and more users migrate to BitShares
Self-actualization: realization of the ful potential. When bigger companies with access to the masses finally notice BitShares and how they could use it. Mass adoption

(https://upload.wikimedia.org/wikipedia/commons/thumb/3/33/MaslowsHierarchyOfNeeds.svg/675px-MaslowsHierarchyOfNeeds.svg.png)

So I'd say we are at the psychological level once we launch. Then next months should be focusing on improving safety while we develop partnerships.

In that pyramid are BROWNIE.PTS the love and belonging?! :)
Title: Re: We might finally have stuff like Authy 2FA on BitShares
Post by: hadrian on September 11, 2015, 04:41:08 pm
Why only 2 factor and not multi-factor? If the security of Bitshares is less than the security on exchanges then people will use exchanges.

On the other hand I also know there is an slight deadline for 2.0 so I suppose it's better to release with 2 factor in October than to delay over it. I just think this should be a priority for future releases.

https://blog.perfectcloud.io/two-factor-vs-multi-factor-authentication-a-stark-difference-2/

What exchange uses multifactor authentication?

Are we talking about 2fa for logging in to exchanges? Loads of exchanges allow for this...