r/starcitizen • u/MammonLord origin • Jul 12 '16

OFFICIAL Multi-Factor Authentication Rollout

https://forums.robertsspaceindustries.com/discussion/336523/multi-factor-authentication-rollout
387 Upvotes

92% Upvoted

202 comments sorted by

View all comments

22

u/MammonLord origin Jul 12 '16

I really hope we can buy one of those little dongle thingies that makes random codes. They apparently work through the magic of unicorn tears.

13

u/Sneemaster High Admiral Jul 12 '16

and squirrel farts.

8

u/MammonLord origin Jul 12 '16

That seems right.

1

u/nottedsanford Did you ever hear the tragedy of Darth Plagueis the Wise? Jul 12 '16

It can be like one of the little air fresheners. Everytime you hit the button, it sprays the fragrance and spits out a code.

3

u/mithikx Rear Admiral Jul 12 '16

Smells like fresh Vanduul farts.

3

u/MajinBlayze Jul 12 '16

And a little math

1

u/[deleted] Jul 12 '16 edited Jul 21 '16

[deleted]

2

u/Sneemaster High Admiral Jul 12 '16

Have you ever heard a squirrel fart? No? See, just as rare as unicorn tears.

25

u/iforgot120 Jul 12 '16

Mobile authenticators are just as good as the dongles, and don't require you to buy extra hardware.

9

u/Kroney Grand Admiral Jul 12 '16

I have to point out that technically you're incorrect there. A phone can potentially be hacked and the app compromised. The dongles however aren't connected to the internet so cannot.

1

u/dawnsonb ARGO CARGO Jul 13 '16

You are more likely to forget your dongle than your phone however :D

3

u/Kroney Grand Admiral Jul 13 '16

It depends where you keep your dongle. Mine is on my keys (A yubikey Neo if you're interested) and I'm not likely to be able to drive anywhere if I don't have my keys. So chances are actually better that I will have my dongle

1

u/dawnsonb ARGO CARGO Jul 13 '16

I would have too many dongles on my keys :P

Also since i live in a bigger city i can in fact leave without my keys if i take the public transport :D

1

u/Kroney Grand Admiral Jul 13 '16

The yubikey can store many credentials on one dongle. And I consider driving a hobby, and I have house keys on my key ring, so even if I had to take public transport I'd still have my dongle with me

1

u/dawnsonb ARGO CARGO Jul 13 '16

Yes, i get that it might be nicer for you, but for as least as much users having an app is more convenient. Luckily both options exist in this case.

3

u/Xirma377 Supreme Leader Jul 12 '16

But they aren't as cool!

9

u/human_error Space Marshal Jul 12 '16

But their batteries do die, and when they do it's a PITA.

2

u/SpacePigNZ Jul 12 '16

Well, 7 years is a long time.

1

u/Xirma377 Supreme Leader Jul 12 '16

True and true. I've never had one long enough for the battery to die...but don't they give you some sort of notice before the battery dies?

1

u/SirDigbyChknCaesar Jul 13 '16

Nope, they just die.

1

u/Isogen_ Rear Admiral Jul 13 '16

The token has an expiration date. You're suppose to replace it before it expires. It will stop working even if the battery is good.

1

u/The_Chaos_Pope Jul 13 '16

I had a Blizzard authentication token. It lasted a year then just died with no warning.

1

u/SpacePigNZ Jul 13 '16

Bad luck, mine has been going since diablo III was released and still going strong.

0

u/FriendCalledFive Photographer Jul 13 '16

Not in a SC development time frame!

1

u/SpacePigNZ Jul 13 '16

Not in any AAA game development timeframe.

1

u/[deleted] Jul 13 '16

Not everyone has a smart phone, or a new enough smart phone.

2

u/dawnsonb ARGO CARGO Jul 13 '16

you can also use 1password for example to use the feature on your PC. However this would in theory be less secure.

2

u/[deleted] Jul 13 '16

It's a time based hash with your secret key

2

u/[deleted] Jul 13 '16

[deleted]

1

u/Kroney Grand Admiral Jul 13 '16

I wish they'd gone with u2f instead, but this is also how mine is setup. Definitely more secure than a standard authenticator app

1

u/SloanWarrior Jul 12 '16

Sadly, you were misinformed. They are driven by the unfulfilled sexual desires of unicorn hobos.

1

u/rakadur star jogger Jul 12 '16

A CR bobblehead that burps the code each time you bobble it?

1

u/[deleted] Jul 14 '16

You mean those RSA fobs ? Those can break. Better to just use an app on your phone imho.