Hello,
I find it very convenient to use my iPhone / Android Phone to connect to my Google Account, thanks to the app they have published on their respective stores.
It works the very same way than the SE token for FFXI/FFXIV, meaning it generates a personal 6-digit code every 30 secs. When using it for the first time, the computer client delivers you a unique key to type in the iPhone app, which will thus guaranty the uniqueness of the 6-digit codes displayed on each of the devices you will use.
Here's a screenshot of the app:
http://imageshack.us/a/img825/7719/img2414.png
The main advantage - non counting the fact you can authenticate from anywhere at anytime, since the app doesn't use any Internet data - is that in case you lose your mobile phone, you can deactivate the app - actually, revoke the codes it will generate - in favor of another one.
Why not adopting such a system in place of the current authenticators, and in the mean time get rid of the limiting factors of the battery and risks of loss/forgetting/breakage. How annoying it is not to be able to play for a month, because you forgot to take the little gadget with you (talking of my own experience), or to be obliged to contact SE when you've run out of battery...
Wouldn't it be a logical evolution of SE's technology? :confused:
_________________________________
Edit 1: The iPhone app IS offline, and it's easy for you to set a password on your phone to prevent intruders to access it. I don't know Android well, but on iOS, there isn't a lot a threats other than the acquaintances who can physically touch your terminal for the moment. ;)
Edit 2: Would use a smartphone people who'd be able/want to. It is out of the question to make the classical tokens that still work useless, or even to stop further production, they still prove they can keep accounts secure.
Authenticator for iOS / Android
Printable View
-
10-14-2012, 12:33 AMEmulordAuthenticator for iOS / Android
-
10-14-2012, 12:46 AMChurchill
The Security Token is nothing more than a way for SE to get more money. It doesn't actually provide additional security because in order to remove it, all you need to do is have the security code from the back of ANY token - not the token actually linked to the account.
If SE actually cared about account security, they would use a system such as this like Blizzard uses, but they do not. They care about getting an extra 20$. -
10-14-2012, 12:59 AMColdfire
I got my token with the CE. But it's true that it has... "issues" xD
But having the generator on a smartphone would be an even worse idea. While it is a bit more convenient, it also opens new ways for others to steal your account. Nowadays smartphones are targeted by trojans alot. The safest key/TAN-generator is offline. -
10-14-2012, 01:02 AMGokuloHmm, but don't you remove the token after logging on the account? Which would mean you still need to proper one.Quote:
Originally Posted by Churchill
-
10-14-2012, 01:09 AMEmulordThe iPhone app IS offline, and it's easy for you to set a password on your phone to prevent intruders to access it. I don't know Android well, but there isn't a lot a threats of this kind on iOS for the moment. ;)Quote:
Originally Posted by Coldfire
-
10-14-2012, 01:21 AMElexiaThe company I work for uses them too, so clearly they're just a money grab. Clearly.Quote:
Originally Posted by Churchill
-
10-14-2012, 01:29 AMSeig345
If it's really all about the money, they could charge their $20 for the app... Granted, I don't recall BW or Blizzard charging for their authenticator apps, but I'd still pay to have an SE one. I'm not really concerned about the battery life, I Just always happen to have my iPod touch with me.
My authenticator is from back when FFXI gave you that mog satchel for registering an authenticator to your account, it's been through the wash at least once, and it still works. On top of that, I have the spare one from the FFXIV CE still in its little plastic wrap >_> -
10-14-2012, 01:32 AMyukikaze_yanagiyou pay for the phisical blizzard authenticator, but not the ios/android :|| btw a SE mobile authenticator is already in the airQuote:
Originally Posted by Seig345
-
10-14-2012, 02:00 AMIngolfNot every security token system is built equally.Quote:
Originally Posted by Elexia
SE's security token system is painfully easy to remove, I'm hoping "The company you work for" doesn't have similar issues.
And yeah, I agree with an Android / iOS authenticator. More and more people are doing it. -
10-14-2012, 02:03 AMElexiaThey use the same token (Vasco), it's easily removed on SE's end because people would bitch if it wasn't easy to remove. You should know that by now.Quote:
Originally Posted by Ingolf
-
10-14-2012, 02:26 AMIngolfHence: "Not every security token system is built equally.".Quote:
Originally Posted by Elexia
I'm aware a lot of organisations use Vasco security tokens, but the system behind it is down to the company using it.
It's a bad decision on SE's part, and goes against the fundamentals of the ideal behind a security token. (not that surprising seeing as it's XI and XIV) -
10-14-2012, 04:12 AMindira
i like the physical token, i change my phones rom alot and i would have to keep keep calling in and getting my token removed on other games i hope they keep the physical tokens around.
-
10-14-2012, 06:53 AMAlhanelemBecause not everyone has a smartphone.Quote:
Why not adopting such a system in place of the current authenticators,
It would be nice as an additional option for authentication, but it would be stupid to get rid of the current security token in introducing it. I'm all for more options- just not removing existing ones. Blizzard offers both the token and a mobile authenticator- you can use either one at any time. -
10-14-2012, 09:01 AMRicky
I'm pretty sure that much like Blizzard, SE makes no profit off of the authenicators
-
10-14-2012, 09:44 AMDhalmel
The only Windows Phone 8 user here I bet :p
-
10-14-2012, 11:32 AMColdfire*in the worldQuote:
Originally Posted by Dhalmel
-
10-14-2012, 11:38 AMSeirra_LanzceYou are not the only one... here i have 3 phones.. iphone, galaxy s3, and lumia phone... :PQuote:
Originally Posted by Dhalmel
-
10-14-2012, 11:56 AMNorackBut it is attached to a foreign hardware device. Even if it never goes online, there are hundreds if not thousands of other ways to steal it. Blizzard is able to do it cause they have the money needed for forensic and security specialists and I doubt SE has that kinda money anymore.Quote:
Originally Posted by Emulord
-
10-14-2012, 02:15 PMAlhanelemYou seem to forget that SE isn't just a publisher of failed online final fantasy games.Quote:
Originally Posted by Norack
-
10-14-2012, 11:11 PMEmulordYou misunderstood me: would use a smartphone people who can/want to.Quote:
Originally Posted by Alhanelem
-
10-14-2012, 11:22 PMEmulordHopefully my Google Account still is safe for the moment.Quote:
Originally Posted by Norack
-
10-15-2012, 12:53 AMHaibelWindows phone 7 user. If you really have 8, cool for you. can't wait for my t-mo account to be upQuote:
Originally Posted by Dhalmel
and I go back to At&t give me a lumia920. they come out late Nov right? -
10-15-2012, 05:17 AMDhalmelUsing the Samsung ATIV S. They're out to the public on Nov 14, it really works well with Windows 8.Quote:
Originally Posted by Haibel
-
10-15-2012, 05:28 AMcasevi
i think this is a great idea!
-
10-15-2012, 05:45 AMHaibelLOL I looked at that phone and said, woah! it's a mini tablet. Pretty much a galaxy note with windows 8 on it.Quote:
Originally Posted by Dhalmel
I would rather have the Lumia 820 but I have no clue what carrier will have that phone. I'm going back to AT&T
only because it is the best carrier in the area I'm in. I always had signal where ever I was with them.
The 820 is the same size as my current HTC HD7 so it would work right for me.
Sorry for the derail OP, um Tokens n stuff? -
10-15-2012, 06:58 AMDelsusI take it you are an Android user because of this fact, and I am the same.Quote:
Originally Posted by indira
All you need to do is use Titanium Backup and backup the app+data, then you will not need to keep removing the token, all the unique information that could be used for an algorithm for an authenticator are stored either on your SIM (phone number) or your efs folder (IMEI) these are not touched by flashing roms so it will not cause any problems as long as you backup your apps and data via titanium backup (which you should really be doing anyway)
I really think this is a brilliant idea, all they need is to use an app with no "network communication" permissions and it will be off the grid... Android apps are run in sandboxes which no one has been able to get around to give an app permissions it doesn't have. I don't know about IOS or BB development so I cannot comment on those.
Android will be able to use it without network communication, and no apps will be able to access the authenticator app because of the sandboxes, as I said these sandboxes are impossible to get around (for now anyway). -
10-15-2012, 06:58 PMEmulordApologize accepted!Quote:
Originally Posted by Haibel