These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
 

Two Factor Authentication

First post
Author
Previous Topic Next Topic
republikanac
Sturmgrenadier Inc
Pandemic Horde
#1 - 2016-01-02 16:48:42 UTC
I am not receiving e-mails for it. WTF
republikanac
Sturmgrenadier Inc
Pandemic Horde
#2 - 2016-01-02 16:49:14 UTC
added layer of security to keep self out I guess
Gregor Parud
Imperial Academy
#3 - 2016-01-02 16:58:33 UTC
CCP: great ideas done terribly.
LordInvisible
Nova Ardour
#4 - 2016-01-03 17:39:08 UTC
Same here.

emails take like 15 minutes to arrive..

Tried from three different IPs from same ISP..
LordInvisible
Nova Ardour
#5 - 2016-01-03 17:44:23 UTC
Update.

I'm using gmail and when mail arrives it says that it was received like 13 minutes ago, but it showed in my inbox just now, although I was reloading gmail client every minute..
Hal Morsh
Doomheim
#6 - 2016-01-03 17:58:09 UTC
LordInvisible wrote:
Update.

I'm using gmail and when mail arrives it says that it was received like 13 minutes ago, but it showed in my inbox just now, although I was reloading gmail client every minute..



Blame google then :P

Oh, I perfectly understand, Hal Morsh — a mission like this requires courage, skill, and heroism… qualities you are clearly lacking. Have you forgotten you're one of the bloody immortals!?
republikanac
Sturmgrenadier Inc
Pandemic Horde
#7 - 2016-01-03 18:04:12 UTC
Hal Morsh wrote:
LordInvisible wrote:
Update.

I'm using gmail and when mail arrives it says that it was received like 13 minutes ago, but it showed in my inbox just now, although I was reloading gmail client every minute..



Blame google then :P


happened multiple times. corrected on CCP end in other time.
Antihrist Pripravnik
Cultural Enrichment and Synergy of Diversity
Stain Neurodiverse Democracy
#8 - 2016-01-03 23:42:15 UTC
Have the same issue with my alt. I've just created a support ticket for it, you should do it as well.

From the mail's header it looks like there's a delay between CCP and Google for some reason... And it's only present for the TSV codes mail. Other mails from CCP (like support tickets) don't have delays.
Chribba
Otherworld Enterprises
Otherworld Empire
#9 - 2016-01-04 11:05:47 UTC
Just a shame it doesn't add any layer of protection at the moment as it can be bypassed. But some day...

/c

★★★ Secure 3rd party service ★★★

Visit my in-game channel 'Holy Veldspar'

Twitter @ChribbaVeldspar
republikanac
Sturmgrenadier Inc
Pandemic Horde
#10 - 2016-01-04 11:19:44 UTC
Chribba wrote:
Just a shame it doesn't add any layer of protection at the moment as it can be bypassed. But some day...

/c


explain please.

using this buggy service, and would stop using it if not beneficial to overall security
Chribba
Otherworld Enterprises
Otherworld Empire
#11 - 2016-01-04 11:39:30 UTC
republikanac wrote:
Chribba wrote:
Just a shame it doesn't add any layer of protection at the moment as it can be bypassed. But some day...

/c


explain please.

using this buggy service, and would stop using it if not beneficial to overall security

The 2FA works placing itself in between your various logins on the forum and in the launcher making use of the authenticator. But untill CCP's legacy code stops users from launching the client directly bypassing the launcher, it doesn't do anything than to add 2FA for those methods only.

So as it is right now, launching the client from the exefile.exe file directly, still gives you the regular username/password login, bypassing the 2FA even if you have enabled it.

So until CCP removes this, it doesn't add much security beyond preventing some brute force attempts on the forum/launcher.

/c

★★★ Secure 3rd party service ★★★

Visit my in-game channel 'Holy Veldspar'

Twitter @ChribbaVeldspar
Primary This Rifter
Mutual Fund of the Something
#12 - 2016-01-04 12:02:27 UTC  |  Edited by: Primary This Rifter
Uh, it adds plenty of security to account management and forums. Just because you can bypass it for logging into the game doesn't make it entirely useless. It's kind of bothersome that you're so quick to jump to conclusions.

And it's not as if you can brute force the login to the game particularly quickly.
Primary This Rifter
Mutual Fund of the Something
#13 - 2016-01-04 12:20:58 UTC  |  Edited by: Primary This Rifter
Also you should really forget the emails and just install Google Authenticator on your phone and add your accounts to it. You don't have to wait for any emails or anything at all, it works all the time, emails can still be sent as a backup, it's more secure (the authentication codes are calculated by your phone every 30 seconds instead of sent through the internet), and you don't clog up your inbox.
Steve Ronuken
Fuzzwork Enterprises
Vote Steve Ronuken for CSM
#14 - 2016-01-04 13:44:23 UTC
There's also https://www.maketecheasier.com/google-authenticator-windows/

Obviously, it's a touch less secure using it on your PC, as if your PC is compromised, they get both. But it's better than nothing.

Woo! CSM XI!

Fuzzwork Enterprises

Twitter: @fuzzysteve on Twitter
Incestuous Criticism
#15 - 2016-01-04 15:23:45 UTC
I have also just noticed that subscriptions are set as recurring until you change your method or cancel your subscription.
It use to be an option to have a recurring payment method or have an email sent which if not paid stopped your subscription until it was manually restarted. Not very happy with this as I preferred not to have recurring payments for anything.
LordInvisible
Nova Ardour
#16 - 2016-01-04 17:48:05 UTC
Whatever, that still doesnt fix the email delay for ONLY this kind of email. I'm getting all other emails promptly shown, only this email take around 15 minutes..
Primary This Rifter
Mutual Fund of the Something
#17 - 2016-01-05 07:30:24 UTC
No it doesn't, but I think it's probably Google's end that's taking so long, not CCP's. It's much better just to get Google Authenticator, since like I said there's absolutely no wait time. You open the app and the numbers are literally right there for you to type into the launcher.

Also the codes are valid for longer than they're shown on the screen. The launcher will accept at least the past two codes shown, so if it changes while you're typing it in that first code you're typing will still work.
Primary This Rifter
Mutual Fund of the Something
#18 - 2016-01-05 07:45:45 UTC
Also there's an extremely easy way for CCP to close this vulnerability, and they've announced that they plan on doing so (though they haven't said anything about this being one of their motivations). I mean of course disallowing manual login from exefile.exe.
republikanac
Sturmgrenadier Inc
Pandemic Horde
#19 - 2016-01-06 07:05:45 UTC
fix this ccp