Pages:
Author

Topic: Mtgox's 2 Factor Authentication: Yubikeys (Read 6741 times)

rjk
sr. member
Activity: 448
Merit: 250
1ngldh
January 08, 2012, 09:25:54 AM
#33
you might want to change your process such that you enable the yubikey login only after ensuring that the key arrived and the user got hold of it. I would suggest to make a yubikey entry from a logged in user necessary to activate yubikey authorization.

otherwise you will lock out customers with slow snail mail... 

at least waiting only two days until lock down is way short Roll Eyes   
They already do this... Until you get your Yubikey and use it for the first time, just hit enter at the Yubikey prompt to bypass it.

sweet it works just fine  Grin  thanks!

would have been nice to know up front, though - rtfm? no answer from gox for 40 hours  Huh

good thing I did not sell anything...
On the old website, I think there was a message clearly visible, but I don't think this is the case on the new site.
legendary
Activity: 1708
Merit: 1020
January 08, 2012, 09:17:54 AM
#32
you might want to change your process such that you enable the yubikey login only after ensuring that the key arrived and the user got hold of it. I would suggest to make a yubikey entry from a logged in user necessary to activate yubikey authorization.

otherwise you will lock out customers with slow snail mail... 

at least waiting only two days until lock down is way short Roll Eyes   
They already do this... Until you get your Yubikey and use it for the first time, just hit enter at the Yubikey prompt to bypass it.

sweet it works just fine  Grin  thanks!

would have been nice to know up front, though - rtfm? no answer from gox for 40 hours  Huh

good thing I did not sell anything...
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
January 08, 2012, 07:10:50 AM
#31
you might want to change your process such that you enable the yubikey login only after ensuring that the key arrived and the user got hold of it. I would suggest to make a yubikey entry from a logged in user necessary to activate yubikey authorization.

otherwise you will lock out customers with slow snail mail... 

at least waiting only two days until lock down is way short Roll Eyes   
They already do this... Until you get your Yubikey and use it for the first time, just hit enter at the Yubikey prompt to bypass it.
legendary
Activity: 1708
Merit: 1020
January 08, 2012, 05:32:46 AM
#30
you might want to change your process such that you enable the yubikey login only after ensuring that the key arrived and the user got hold of it. I would suggest to make a yubikey entry from a logged in user necessary to activate yubikey authorization.

otherwise you will lock out customers with slow snail mail... 

at least waiting only two days until lock down is way short Roll Eyes   
vip
Activity: 608
Merit: 501
-
Will the trading api still work if your account has a yubikey associated with it?

Yep, except for withdraw. Once things are setup (this week) you'll be able to generate API keys for your account and define rights for each key, and stop using your login/pass to access  the API.
hero member
Activity: 711
Merit: 500
Will the trading api still work if your account has a yubikey associated with it?
member
Activity: 96
Merit: 10
full member
Activity: 154
Merit: 100
What scheme is Mt. Gox using? Are they using Yubikey's verification servers? Do they generate the key and burn it into the token themselves? Or can the user program the token?

We use our own AES keys (two random AES key by user) and burn the tokens.

We will provide in the future an option to unlink a token and retrieve the keys & programming codes.

sounds good.
hero member
Activity: 588
Merit: 500
I had nothing to do with it!
member
Activity: 96
Merit: 10
hope that is fixed soon.

The only issue I have with my yubikey is that it keeps disappearing on my desk.  Roll Eyes

User error!  Grin

yes, "ID 10 T" error here.
full member
Activity: 168
Merit: 100
hope that is fixed soon.

The only issue I have with my yubikey is that it keeps disappearing on my desk.  Roll Eyes

User error!  Grin
member
Activity: 96
Merit: 10
hope that is fixed soon.

The only issue I have with my yubikey is that it keeps disappearing on my desk.  Roll Eyes
hero member
Activity: 546
Merit: 500
Hey MT, is there a shipping fee for international buyers or is it included in the cost?

The shipping fee is included in the price for any destination. Depending on your country's customs you may have to pay a tax.

what happened to the offer to give these away you made on onlyonetv bitcoin show when your site was hacked. you said they would be free to peeps who had trades reversed, ie inconvenienced..

i stand corrected, they are free if your account was affected like mine !




That's cool. I'm still locked out of my account!

Sad

vip
Activity: 608
Merit: 501
-
What scheme is Mt. Gox using? Are they using Yubikey's verification servers? Do they generate the key and burn it into the token themselves? Or can the user program the token?

We use our own AES keys (two random AES key by user) and burn the tokens.

We will provide in the future an option to unlink a token and retrieve the keys & programming codes.
newbie
Activity: 41
Merit: 0
Woah ! nice gift this is from MtGox !!!  Ordered mine, but bye bye anonymity ahah
legendary
Activity: 1596
Merit: 1012
Democracy is vulnerable to a 51% attack.
This really needs a smartphone app. Smiley
If Gox lets you program your own Yubikey, you can do the same thing without a Yubikey. The algorithm is public and well-documented. It's basically just AES.
full member
Activity: 154
Merit: 100
Hey MT, is there a shipping fee for international buyers or is it included in the cost?

The shipping fee is included in the price for any destination. Depending on your country's customs you may have to pay a tax.

what happened to the offer to give these away you made on onlyonetv bitcoin show when your site was hacked. you said they would be free to peeps who had trades reversed, ie inconvenienced..

i stand corrected, they are free if your account was affected like mine !

jr. member
Activity: 74
Merit: 1
This really needs a smartphone app. Smiley

Good idea.
full member
Activity: 154
Merit: 100
Hey MT, is there a shipping fee for international buyers or is it included in the cost?

The shipping fee is included in the price for any destination. Depending on your country's customs you may have to pay a tax.

what happened to the offer to give these away you made on onlyonetv bitcoin show when your site was hacked. you said they would be free to peeps who had trades reversed, ie inconvenienced..
hero member
Activity: 588
Merit: 500
This really needs a smartphone app. Smiley
Pages:
Jump to: