Page 1
Page 1
Started By
Message

Looks like Google will soon force two-factor authentication on users

Posted on 5/17/21 at 9:10 pm
Posted by captron
Occupied Sillycon Valley
Member since Jul 2018
506 posts
Posted on 5/17/21 at 9:10 pm
What's your take on this ? A good thing or just another way for Google to get their hooks deeper into your business or both ?


laptop_mag_link
Posted by Vrai
Baton Rouge
Member since Nov 2003
3955 posts
Posted on 5/17/21 at 9:12 pm to
How does 2FA get Google's hooks deeper in you?
Posted by captron
Occupied Sillycon Valley
Member since Jul 2018
506 posts
Posted on 5/17/21 at 9:15 pm to


Would think it needs to send a PIN to a different email address, a cell phone, a home phone etc.
Posted by Vrai
Baton Rouge
Member since Nov 2003
3955 posts
Posted on 5/17/21 at 9:23 pm to
There's a ton to not like Google over, but I don't think this is one of them. More people need to use 2FA
Posted by Ace Midnight
Between sanity and madness
Member since Dec 2006
92488 posts
Posted on 5/18/21 at 7:04 am to
It's to make the phone even more of an anchor/leash. Of course, for most folks that won't be that big of a change.
Posted by AlxTgr
Kyre Banorg
Member since Oct 2003
84239 posts
Posted on 5/18/21 at 7:40 am to
One of my clients has gone to this. Frikin hate it. What are they afraid of? Someone finding out what I think a claim is worth?
Posted by Vrai
Baton Rouge
Member since Nov 2003
3955 posts
Posted on 5/18/21 at 8:07 am to
You don't see the benefit of multi-factor authentication?
Posted by dakarx
Member since Sep 2018
7839 posts
Posted on 5/18/21 at 8:39 am to
2FA in itself is great. Never thought I would miss carrying 3 or 4 RSA tokens on my keyring/badge lanyard, etc....however tying them to apps on a mobile phone is a pain. I have to keep Google Auth, 2 RSA tokens, and Microsoft Auth on my phone.
Posted by Arkapigdiesel
Faulkner County
Member since Jun 2009
14669 posts
Posted on 5/18/21 at 9:40 am to
quote:

More people need to use 2FA

I think every company should offer 2FA. Looking at you Netflix.
Posted by AlxTgr
Kyre Banorg
Member since Oct 2003
84239 posts
Posted on 5/18/21 at 9:57 am to
quote:

You don't see the benefit of multi-factor authentication?


In general, or for this purpose?
Posted by Joshjrn
Baton Rouge
Member since Dec 2008
29894 posts
Posted on 5/18/21 at 10:02 am to
For the average person, their gmail account is the key to everything else in their lives, because it's their password recovery email address. Google adding two factor makes perfect sense.
Posted by ibldprplgld
Member since Feb 2008
26080 posts
Posted on 5/18/21 at 10:11 am to
I welcome the change.

While a pain in the butt, MFA is huge for peace of mind. I recently had to explain to my mother why this is important and she needs to set it up for her banking logins. She was disgruntled but did it.
Posted by captron
Occupied Sillycon Valley
Member since Jul 2018
506 posts
Posted on 5/18/21 at 11:57 am to
Really haven't followed this as much as I should. Has the problem with Sim Swap been addressed ? Not convinced using a cell phone does much.


S sim swap

LINK

This post was edited on 5/18/21 at 11:58 am
Posted by TouchedTheAxeIn82
near the Apple spaceship
Member since Nov 2012
6323 posts
Posted on 5/18/21 at 12:15 pm to
quote:

While a pain in the butt, MFA is huge for peace of mind.

I really don't think it has to be a pain in the butt. I've been using a YubiKey for 10 years, first with LastPass, and then a few years ago I got a YubiKey NEO, which has FIDO support for Google and NFC for use with my phone. I still use the original YubiKey I bought in 2011 as well. These things are super rugged.

For someone who doesn't use 2FA at all right now, I would recommend getting Yubico's cheaper "Security Key NFC" (the price shows $24.50 for me):

https://www.amazon.com/dp/B07M8YBWQZ/

It supports FIDO and FIDO2. You don't have to understand what the acronyms mean, just that it's the emerging standard for 2FA. You can use this Security Key with Google, Microsoft, Dropbox, and any other service that supports FIDO or FIDO2. This key also has NFC so you can use it on your phone (I assume most phones have NFC?).

If you happen to use LastPass, then you should get the full YubiKey which includes the original OTP functionality that LastPass uses. It comes in various form factors (USB-A, USB-C, and in a tiny form to keep plugged into your laptop indefinitely).
This post was edited on 5/18/21 at 12:20 pm
Posted by captron
Occupied Sillycon Valley
Member since Jul 2018
506 posts
Posted on 5/18/21 at 12:21 pm to
quote:

I really don't think it has to be a pain in the butt. I've been using a YubiKey for 10 years,


Interesting. Will check it out.

May be wrong but sending a PIN to your phone seems to add security in one way but creates a whole new "surface" to be exploited.
Posted by TouchedTheAxeIn82
near the Apple spaceship
Member since Nov 2012
6323 posts
Posted on 5/18/21 at 12:32 pm to
Using text messages (SMS) for 2FA is not secure, for the reason you pointed out.

I use both Google Authenticator and Microsoft Authenticator as well for various reasons, but I find them confusing to set up. I think a hardware key is the easiest to use for most people.

Here are a couple of helpful articles:

https://www.zdnet.com/article/yubikey-hands-on-hardware-based-2fa-is-more-secure-but-watch-out-for-these-gotchas/

https://www.tomsguide.com/us/2fa-right-way,news-29824.html
This post was edited on 5/18/21 at 12:42 pm
Posted by captron
Occupied Sillycon Valley
Member since Jul 2018
506 posts
Posted on 5/18/21 at 12:48 pm to
Thanks, Haven't really followed the security piece of online banking etc. as much as I should have.

Will look into a Yubikey or device like it.
first pageprev pagePage 1 of 1Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on X, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookXInstagram