[Announcement About Account Security] Haven/Salem

[MagicManICT]

Another downside is too many of these phone activation systems ONLY deal with cell phones with text messaging. I know every phone in the US that can be used on the networks has text available, but some of us flat refuse to pay $30, $50, or more for something we might use for, at most, an hour a month. When you use burner phones, every one of those text messages adds up to the cost of doing business.

Phones are for the 90s. Please leave them there. Let's get universal Wi-Fi and a device and we can leave these shitty telecom companies behind. (I know... they'll be running the network connections just like they do now.)

[Lord_of_War]

Another downside is too many of these phone activation systems ONLY deal with cell phones with text messaging. I know every phone in the US that can be used on the networks has text available, but some of us flat refuse to pay $30, $50, or more for something we might use for, at most, an hour a month. When you use burner phones, every one of those text messages adds up to the cost of doing business.

Phones are for the 90s. Please leave them there. Let's get universal Wi-Fi and a device and we can leave these shitty telecom companies behind. (I know... they'll be running the network connections just like they do now.)

They tried that and it failed hard. What you want is a mesh network or stronger wifi. The problem is that the energy usage of talking to a tower is much higher than that of wifi. We simply need more efficiency or battery life.

[Potjeh]

A form of security that I've absolutely fallen in love with is phone verification. If a system/device attempts to login to your account that hasn't before then your phone gets a text asking if that's really you or not. Short of stealing someone's computer or phone there's not much you can do to break past this.

You could hack their operator

[borka]

"Tap" GPRS, 3G (UMTS), 4G (LTE) ...

[Lord_of_War]

"Tap" GPRS, 3G (UMTS), 4G (LTE) ...

The encryption is pretty strong, even if its super easy to spoof a tower.

[Kid123]

"Tap" GPRS, 3G (UMTS), 4G (LTE) ...

The encryption is pretty strong, even if its super easy to spoof a tower.

My thoughts exactly

[mvgulik]

Forum search: YubiKey
Found: _1_ (by loftar » Wed Sep 15, 2010)

Forum search: keepass
Found: _1_ (by mvgulik » Tue Sep 24, 2013) ... lol

[loftar]

YubiKey

It could certainly be argued that YubiKey support would be a Nice Thing to add. Do you know how it's supposed to work in practice: Are users normally supposed to "bring their own Yubikey", or am I supposed to distribute them for a cost? (The latter seems like quite a PITA.)

[mvgulik]

I know of YubiKey, but I'm not a YubiKey user ... yet.

I don't think there are any special needs. Other than for Dev's that like to add YubiKey support, to add the needed software. (See: http://www.yubico.com/develop/ )
For the YubiKey's them self(hardware). Users can buy them directly online.

Finding, and talking to, some other Dev's that have added YubiKey support to there product is probably not a bad idea.

[borka]

Isn't it's verification cloud based and you're using just their API in your Application to connect there?

https://github.com/Yubico/yubikey-val