Jump to content
Not connected, Your IP: 44.192.20.240
Guest

Google Authenticator

Recommended Posts

Guest

Google authenticator with my phone number for 2FA? These are huge red flags that tells me AirVPN is not what they say they are i.e. secure and anonymous. Quite the contrary. Maybe even part of the great social engineering clik. No thanks. Glad I diden't actually buy a subscription.

Share this post


Link to post
20 hours ago, 2old2giveAchit said:

Google authenticator with my phone number for 2FA? These are huge red flags that tells me AirVPN is not what they say they are i.e. secure and anonymous. Quite the contrary. Maybe even part of the great social engineering clik. No thanks. Glad I diden't actually buy a subscription.


In your fantasy world only. In AirVPN 2FA is based on TOTP https://en.wikipedia.org/wiki/Time-based_one-time_password which does not require any Google app and does not require any phone number. TOTP is an open protocol described by IETF in RFC 6238

Share this post


Link to post
20 hours ago, 2old2giveAchit said:

Google authenticator with my phone number for 2FA? These are huge red flags that tells me AirVPN is not what they say they are i.e. secure and anonymous. Quite the contrary. Maybe even part of the great social engineering clik. No thanks. Glad I diden't actually buy a subscription.


One of the most hilarious messages of the year. Just a troll or a real assclown? Curious, perhaps impossible, that 12 years after its introduction there are those who think TOTP needs phone numbers or Google, but the Invision Board plays a role to mislead because in the account panel to enable 2FA it says "You will need Google Authenticator". Can someone from @Staff fix this idiotic bullshit? I know that some IPB strings are crypt coded but maybe you can customize in some way.
 

Share this post


Link to post

Could connecting to my Google Authenticator app potentially make my account less secure? Wouldn’t it be linked to my account, and therefore be traceable back to my account? 

Complete noob here, sorry if it’s a stupid question but I’m genuinely curious

Share this post


Link to post
37 minutes ago, Hadalio said:

Could connecting to my Google Authenticator app potentially make my account less secure? Wouldn’t it be linked to my account, and therefore be traceable back to my account? 

Complete noob here, sorry if it’s a stupid question but I’m genuinely curious


Hello! Google Authenticator has become closed source software (proprietary freeware) recently. It was open source software for a decade or so, and then it was closed, bad decision in our opinion. So you might (should?) prefer anyway an open source alternative. See also:
https://en.wikipedia.org/wiki/Comparison_of_OTP_applications

The potential correlation you talk about, which can happen with any TOTP based application, could come from the unlikely comparison between your secret shared key if you have your device stolen/seized and decrypted/cracked, and all the secret shared keys stored in AirVPN, if they are at the same time stolen or seized. But then this would only prove that you are an AirVPN customer, not how you used AirVPN.

Also remember that you don't need a mobile platform and/or an Android system to use an OTP based application.

Kind regards
 

Share this post


Link to post
16 hours ago, fsy said:

One of the most hilarious messages of the year. Just a troll or a real assclown? Curious, perhaps impossible, that 12 years after its introduction there are those who think TOTP needs phone numbers or Google, but the Invision Board plays a role to mislead because in the account panel to enable 2FA it says "You will need Google Authenticator". Can someone from @Staff fix this idiotic bullshit? I know that some IPB strings are crypt coded but maybe you can customize in some way.
 

Hello!

Definitely, that reference to Google Authenticator was an old remnant of board's scrambled text. Please verify that everything has been fixed properly now. Thank you for the head-up.

Kind regards
 

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...