Added the option of two factor auth for GLBSE logins.
Topic: GLBSE 2.0 open for testing - page 11. (Read 51751 times)
It would be nice if auth could be disabled (only after authentication). I hate to think what would happen if you lose your phone..
You can disable it, make sure all the boxes are NOT ticked and enter the code, and then it's off.
Wait, you need to own a smartphone and install an app to use dual auth?
Glad I didn't enable that, I would have locked myself out. I don't own a smartphone.
Glad I didn't enable that, I would have locked myself out. I don't own a smartphone.
You need to have it working on your smart phone just to enable it, you can't do it by accident.
What about these Yubikey things?
They are cool, but most people don't seem to value the security they add, and don't want to pay for them. 
I also noticed that Blockchain.info is able to use an actual MtGox yubikey, and doesn't require you to have a generic one on hand. This means that they are using the MtGox yubikey authentication server. Nefario, could you look into implementing this? It would make it possible for those with a MtGox yubikey to use it without buying a new one.
What about these Yubikey things?
It's simple, really. Install the auth app and enable auth on glbse. All you have to do is scan the qr code that comes up. There are many versions of the app, but make sure you can get the your camera working with the app first.
If you're typing it in manually, try GLBSE or glbse as the name. I'm not sure if it makes a difference, but I think that's what the qr code contains in addition to the key.
It would be nice if auth could be disabled (only after authentication). I hate to think what would happen if you lose your phone..
If you're typing it in manually, try GLBSE or glbse as the name. I'm not sure if it makes a difference, but I think that's what the qr code contains in addition to the key.
It would be nice if auth could be disabled (only after authentication). I hate to think what would happen if you lose your phone..
Wait, you need to own a smartphone and install an app to use dual auth?
Glad I didn't enable that, I would have locked myself out. I don't own a smartphone.
It's simple, really. Install the auth app and enable auth on glbse. All you have to do is scan the qr code that comes up. There are many versions of the app, but make sure you can get the your camera working with the app first.
If you're typing it in manually, try GLBSE or glbse as the name. I'm not sure if it makes a difference, but I think that's what the qr code contains in addition to the key.
It would be nice if auth could be disabled (only after authentication). I hate to think what would happen if you lose your phone..
If you're typing it in manually, try GLBSE or glbse as the name. I'm not sure if it makes a difference, but I think that's what the qr code contains in addition to the key.
It would be nice if auth could be disabled (only after authentication). I hate to think what would happen if you lose your phone..
Is there a guide on how to set up 2 factor auth? I dont want to screw it up and be locked out of my own account. the google auth app doesnt have any directions.
+1
Is there a guide on how to set up 2 factor auth? I dont want to screw it up and be locked out of my own account. the google auth app doesnt have any directions.
Just tried to log in then it came to the screen asking for the captcha, I thought that is odd since chrome auto fills it for me. Then I failed the captcha but it didn't give any error, the first thing I think: Oh fuck I've been hacked, oh shit fuck shit, then I send reset email, finally I get captcha correct.
Now I added two factor authentication, and I logged out to test it, now it doesn't even ask me for a captcha or the authentication code to log in :s
It said that I enabled it, yet in the settings the options for two factor auth stay empty, it would be nice if that kept the current values from the database and the green enable button turned to a red disable button.
Now I added two factor authentication, and I logged out to test it, now it doesn't even ask me for a captcha or the authentication code to log in :s
It said that I enabled it, yet in the settings the options for two factor auth stay empty, it would be nice if that kept the current values from the database and the green enable button turned to a red disable button.
Two-factor auth for login is coming later today, the two-factor page will also be updated to be more informative.
Sorry if the answer for this is out here somewhere already.
Is there a referral program for GLBSE yet?
noIs there a referral program for GLBSE yet?
bummer, think that would be a good idea?
I would love to push this to my friends and a kick back of the transaction fees would be a nice incentive...
Sorry if the answer for this is out here somewhere already.
Is there a referral program for GLBSE yet?
no Is there a referral program for GLBSE yet?
Sorry if the answer for this is out here somewhere already.
Is there a referral program for GLBSE yet?
Is there a referral program for GLBSE yet?
I don't know if I should be worried but the password box is in cleartext.
You should be if there is someone over your shoulder, but since it's submitted over https, no one else online will be reading it.
Quite a lot of users couldn't login because they left their caps lock key on, this lets then see exactly what they're entering.
The normal login for password is stared out.
I don't know if I should be worried but the password box is in cleartext.
You could also just display them compounded, the silly small bids then just don't influence anything any more.
Currently 100 bids @ 1 BTC look different than 1 bid @ 1 BTC, even though for most people interested in the order book, the situation is the same.
Currently 100 bids @ 1 BTC look different than 1 bid @ 1 BTC, even though for most people interested in the order book, the situation is the same.
How about requiring that bids/asks be placed within 50% of the "last" price to avoid making a mess of the orders chart? Or maybe having the orders chart only show open orders within 50% of the "last" price...
One suggestion:
IPO list ordered by IPO date.
IPO list ordered by IPO date.
Yep, our daemon for processing deposits/withdrawals had died, and as usual the timing was perfect (I was on a bus heading down to London).
All fixed now.
All fixed now.
It should be quite easy to make a cron that attempts a command on the daemon and if it fails to restart it. Hope it helps
Speaking of, it appears to have died again. 24 confirmations, no funds, and us.glbse.com/portfolio/bitcoin gives an internal server error.
EDIT: Seems to be fixed now.
I'm updating the system so you won't have to press buttons to check.
Yep, our daemon for processing deposits/withdrawals had died, and as usual the timing was perfect (I was on a bus heading down to London).
All fixed now.
All fixed now.
It should be quite easy to make a cron that attempts a command on the daemon and if it fails to restart it. Hope it helps
Speaking of, it appears to have died again. 24 confirmations, no funds, and us.glbse.com/portfolio/bitcoin gives an internal server error.
EDIT: Seems to be fixed now.
I just made a deposit, it has 10 confirmations and the bitcoins have still not shown up in my GLBSE account. Very annoying.
Been 14 confirmations and still not in the GLBSE account. Is this normal? Anyway to show incoming deposits that are waiting on confirmations? I think Bitcoinica does this.
same here. Sent from personal Bitcoin client. now at 25+ confirms not in acct. It is likely the GLBSE daemon has crashed or something.
cheers
edit; the site is looking awesome btw. ;p
Yep, our daemon for processing deposits/withdrawals had died, and as usual the timing was perfect (I was on a bus heading down to London).
All fixed now.
Jump to: