The Rolex Forums   The Rolex Watch

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Old 18 June 2020, 06:13 PM   #31
Andad
2024 Pledge Member
 
Andad's Avatar
 
Join Date: Nov 2006
Real Name: Eddie
Location: Australia
Watch: A few.
Posts: 36,692
Hi Steve,

Nice talking to you earlier.

Cloud accounting systems in OZ have 2 factor authenticating as a legal requirement.

You are offering existing members 2FC as an optional feature but could it be a mandatory requirement for future members?

As more and more members join just to buy and sell watches this may be worth considering.
__________________
E

Andad is offline   Reply With Quote
Old 18 June 2020, 06:26 PM   #32
Brew
"TRF" Member
 
Brew's Avatar
 
Join Date: Mar 2018
Real Name: Larry
Location: Finger Lakes
Posts: 6,007
Quote:
Originally Posted by cop414 View Post
It’s there.
Thank you. I'm guessing that looking for it from my MacBook prevented me from seeing it.

Now for the other dumb question, please: if 2FA is on your phone, will it impede access from the MacBook?

Thanks for your patience and help, all.
Brew is offline   Reply With Quote
Old 18 June 2020, 06:28 PM   #33
Lol-x
Facilitator
 
Lol-x's Avatar
 
Join Date: Nov 2005
Real Name: Steve
Location: Omnipresent
Posts: 33,197
2 factor authentication cannot be made mandatory, but it is free and easily activated by any member via their "User CP" as explained above.

Any member who fails to activate 2FA on their account, and their account is breached by a scammer, and used to deceive and procure money from an unsuspecting innocent member, may potentially find themselves in a position of legal risk and have some serious explaining to do.

There is no real excuse for not activating 2 factor authentication for your own protection and that of your follow TRF members to make this community more secure.
__________________

Most folks are about as happy as they make up their minds to be. ~Abraham Lincoln
Nothing compares to the simple pleasure of a bike ride. ~John F. Kennedy

ROLEXploitation - yeah I'm a victim
Lol-x is offline   Reply With Quote
Old 18 June 2020, 06:30 PM   #34
Lol-x
Facilitator
 
Lol-x's Avatar
 
Join Date: Nov 2005
Real Name: Steve
Location: Omnipresent
Posts: 33,197
Quote:
Originally Posted by Brew View Post
Thank you. I'm guessing that looking for it from my MacBook prevented me from seeing it.

Now for the other dumb question, please: if 2FA is on your phone, will it impede access from the MacBook?

Thanks for your patience and help, all.
Of course you must install the Google Authenticator application on your iPhone, iPad or Android phone or tablet.

No activating 2AF will not affect your usage of or access from your Macbook, but you may on occasions be requested to authenticate which is a 10 second process.
__________________

Most folks are about as happy as they make up their minds to be. ~Abraham Lincoln
Nothing compares to the simple pleasure of a bike ride. ~John F. Kennedy

ROLEXploitation - yeah I'm a victim
Lol-x is offline   Reply With Quote
Old 18 June 2020, 06:37 PM   #35
Brew
"TRF" Member
 
Brew's Avatar
 
Join Date: Mar 2018
Real Name: Larry
Location: Finger Lakes
Posts: 6,007
Quote:
Originally Posted by Lol-x View Post
Of course you must install the Google Authenticator application on your iPhone, iPad or Android phone or tablet.

No activating 2AF will not affect your usage of or access from your Macbook, but you may on occasions be requested to authenticate which is a 10 second process.
Thank you. And thanks for looking out for us (including the slow ones . . . . ).
Brew is offline   Reply With Quote
Old 18 June 2020, 06:48 PM   #36
trackingtime
2024 Pledge Member
 
trackingtime's Avatar
 
Join Date: Jun 2020
Location: Asia
Watch: Audemars Piguet RO
Posts: 2,323
just activated mine.

thank you steve!
trackingtime is offline   Reply With Quote
Old 18 June 2020, 09:53 PM   #37
77T
2024 Pledge Member
 
77T's Avatar
 
Join Date: Dec 2010
Real Name: PaulG
Location: Georgia
Posts: 40,565
Quote:
Originally Posted by Lol-x View Post
2 factor authentication cannot be made mandatory, but it is free and easily activated by any member via their "User CP" as explained above.

Any member who fails to activate 2FA on their account, and their account is breached by a scammer, and used to deceive and procure money from an unsuspecting innocent member, may potentially find themselves in a position of legal risk and have some serious explaining to do.

There is no real excuse for not activating 2 factor authentication for your own protection and that of your follow TRF members to make this community more secure.
Understand

And your work is appreciated.
__________________


Does anyone really know what time it is?
77T is online now   Reply With Quote
Old 18 June 2020, 10:45 PM   #38
sgwatchguy
"TRF" Member
 
sgwatchguy's Avatar
 
Join Date: Jan 2020
Real Name: KP Jimmy
Location: Singapore
Watch: R/AP/FPJ/Hermès/et
Posts: 6,597
Thanks Steve. Done
__________________
sgwatchguy is offline   Reply With Quote
Old 19 June 2020, 12:15 AM   #39
Bearxj86
"TRF" Member
 
Bearxj86's Avatar
 
Join Date: Jun 2017
Location: Los Angeles
Watch: 3970
Posts: 3,793
Must do this!
Bearxj86 is offline   Reply With Quote
Old 19 June 2020, 12:45 AM   #40
GolfJunkie
2024 Pledge Member
 
GolfJunkie's Avatar
 
Join Date: Jan 2017
Real Name: Eric
Location: USA
Watch: 252
Posts: 4,797
Took seconds to do this.

Thanks Steve!
GolfJunkie is online now   Reply With Quote
Old 19 June 2020, 02:28 AM   #41
linesiders
2024 Pledge Member
 
linesiders's Avatar
 
Join Date: Dec 2011
Location: RedSox Nation
Watch: U Talkn Bout Wilis
Posts: 5,418
For the record (IT Guy here) I set up the 2FA with Authy, which is another 2FA app.

For people on the fence: it is is EXTREMELY difficult to circumvent Multi-Factor Authentication and you should do this on all of your accounts, especially if you use same password on all of those accounts (very bad practice). They get one, they get all.

If you have not used 2FA before, you should start, really.

Quote:
Originally Posted by Lol-x View Post
2 factor authentication cannot be made mandatory, but it is free and easily activated by any member via their "User CP" as explained above.

Any member who fails to activate 2FA on their account, and their account is breached by a scammer, and used to deceive and procure money from an unsuspecting innocent member, may potentially find themselves in a position of legal risk and have some serious explaining to do.

There is no real excuse for not activating 2 factor authentication for your own protection and that of your follow TRF members to make this community more secure.

__________________
I'm a sailor peg. And I've lost my leg. Climbing up the top sails. I've lost my leg!
linesiders is offline   Reply With Quote
Old 19 June 2020, 05:07 AM   #42
Lol-x
Facilitator
 
Lol-x's Avatar
 
Join Date: Nov 2005
Real Name: Steve
Location: Omnipresent
Posts: 33,197
Quote:
Originally Posted by linesiders View Post
For the record (IT Guy here) I set up the 2FA with Authy, which is another 2FA app

Yes, you are right Authy is a much better App to use than Google Authenticator.

Authy is far better in case you lose your phone.

It's a no brainer really Authy is the way to go.
__________________

Most folks are about as happy as they make up their minds to be. ~Abraham Lincoln
Nothing compares to the simple pleasure of a bike ride. ~John F. Kennedy

ROLEXploitation - yeah I'm a victim
Lol-x is offline   Reply With Quote
Old 19 June 2020, 12:29 PM   #43
037
2024 Pledge Member
 
037's Avatar
 
Join Date: Feb 2018
Location: USA
Posts: 6,171
Steve, thank you for adding this feature. This is an immense improvement in security that we can hope more follow. I have a couple dozen accounts using 2FA via either TOTP or hardware key and look forward to the rest catching up.

Quote:
Originally Posted by Lol-x View Post
There is no real excuse for not activating 2 factor authentication for your own protection and that of your follow TRF members to make this community more secure.
Perhaps a small banner at the top would be a good idea?
037 is offline   Reply With Quote
Old 19 June 2020, 03:07 PM   #44
SPMN
"TRF" Member
 
SPMN's Avatar
 
Join Date: Apr 2017
Location: St Paul, MN
Watch: Tudor, Omega
Posts: 1,218
Excellent. I’m all set. Nice to have that extra security.
SPMN is offline   Reply With Quote
Old 19 June 2020, 05:00 PM   #45
Lol-x
Facilitator
 
Lol-x's Avatar
 
Join Date: Nov 2005
Real Name: Steve
Location: Omnipresent
Posts: 33,197
Authy is far superior to Google Authenticator.
If you lose your phone or it is stolen then with Google Authenticator you could be in a lot of trouble if you do not have your recovery key. Also with Authy you can have that app on multiple devices and even on Windows and Mac desktop/notebooks.

Authy-G-Authenticator.jpg
__________________

Most folks are about as happy as they make up their minds to be. ~Abraham Lincoln
Nothing compares to the simple pleasure of a bike ride. ~John F. Kennedy

ROLEXploitation - yeah I'm a victim
Lol-x is offline   Reply With Quote
Old 19 June 2020, 05:03 PM   #46
gejay99
"TRF" Member
 
gejay99's Avatar
 
Join Date: Mar 2020
Location: San Francisco
Posts: 371
Thank you so much!


Sent from my iPhone using Tapatalk
__________________
Instagram: @madelocalinvesting
gejay99 is offline   Reply With Quote
Old 19 June 2020, 11:20 PM   #47
linesiders
2024 Pledge Member
 
linesiders's Avatar
 
Join Date: Dec 2011
Location: RedSox Nation
Watch: U Talkn Bout Wilis
Posts: 5,418
Quote:
Originally Posted by Lol-x View Post
Yes, you are right Authy is a much better App to use than Google Authenticator.

Authy is far better in case you lose your phone.

It's a no brainer really Authy is the way to go.

It is more flexible and like you said, you can share it across multiple devices.
__________________
I'm a sailor peg. And I've lost my leg. Climbing up the top sails. I've lost my leg!
linesiders is offline   Reply With Quote
Old 20 June 2020, 12:02 AM   #48
brmott
"TRF" Member
 
Join Date: Apr 2018
Real Name: Bryan
Location: Tulsa, OK
Watch: Rolex SubC
Posts: 159
Just installed and activated for TRF
brmott is offline   Reply With Quote
Old 20 June 2020, 01:15 AM   #49
Lol-x
Facilitator
 
Lol-x's Avatar
 
Join Date: Nov 2005
Real Name: Steve
Location: Omnipresent
Posts: 33,197
Quote:
Originally Posted by 037 View Post
Perhaps a small banner at the top would be a good idea?
A banner at the top, where do you mean?
__________________

Most folks are about as happy as they make up their minds to be. ~Abraham Lincoln
Nothing compares to the simple pleasure of a bike ride. ~John F. Kennedy

ROLEXploitation - yeah I'm a victim
Lol-x is offline   Reply With Quote
Old 20 June 2020, 02:59 AM   #50
mgd55
"TRF" Member
 
mgd55's Avatar
 
Join Date: Feb 2018
Real Name: Matt
Location: NYC
Watch: 214270 16570
Posts: 381
Thanks for this. Just installed and set up for TRF and feel better already


Sent from my iPhone using Tapatalk
mgd55 is offline   Reply With Quote
Old 20 June 2020, 03:25 AM   #51
Goose 104
"TRF" Member
 
Goose 104's Avatar
 
Join Date: Nov 2019
Location: UK
Watch: 126622
Posts: 871
Just used the Google authenticator and it was easy - cheers!
Goose 104 is offline   Reply With Quote
Old 20 June 2020, 04:47 AM   #52
BNA/LION
2024 Pledge Member
 
BNA/LION's Avatar
 
Join Date: May 2011
Real Name: Larry
Location: San Diego, CA
Watch: ROLEX
Posts: 25,122
Done! Thank for the instructions!
__________________

✦ 28238 President DD 18K/YG ✦ 16610LN SS Sub ✦ 16613 18K/SS Serti ✦ 16550 Exp II Non-Rail Cream Dial ✦ Daytona C 116500 ✦ 126710 BLRO GMT-Master II ✦ NEXT-->?
Hole In One! 10/3/19 DMCC 5th hole, par 3, 168 yards w/ 4-Iron.
BNA/LION is offline   Reply With Quote
Old 20 June 2020, 08:03 AM   #53
77T
2024 Pledge Member
 
77T's Avatar
 
Join Date: Dec 2010
Real Name: PaulG
Location: Georgia
Posts: 40,565
Quote:
Originally Posted by Lol-x View Post
A banner at the top, where do you mean?


Steve
I think he means on each user’s sidebar frame.

A mock-up sample below.




Sent from my iPhone using Tapatalk Pro
__________________


Does anyone really know what time it is?
77T is online now   Reply With Quote
Old 20 June 2020, 12:56 PM   #54
Lol-x
Facilitator
 
Lol-x's Avatar
 
Join Date: Nov 2005
Real Name: Steve
Location: Omnipresent
Posts: 33,197
While that banner looks really cool the 2FA software does not provide for a banner to be displayed. To install a banner would mean that I would need to hack the 2FA software and that is not something I am prepared to do for a number or reasons.

At the same time:
(a) I expect most if not all users to have 2FA enabled; and
(b) why do we want to give a scammer a road map who has and has not 2FA enabled.
__________________

Most folks are about as happy as they make up their minds to be. ~Abraham Lincoln
Nothing compares to the simple pleasure of a bike ride. ~John F. Kennedy

ROLEXploitation - yeah I'm a victim
Lol-x is offline   Reply With Quote
Old 20 June 2020, 03:49 PM   #55
Old Expat Beast
TRF Moderator & 2024 Patron
 
Old Expat Beast's Avatar
 
Join Date: Jul 2013
Real Name: Adam
Location: Hong Kong
Watch: SEIKO
Posts: 28,262
Quote:
Originally Posted by Lol-x View Post
While that banner looks really cool the 2FA software does not provide for a banner to be displayed. To install a banner would mean that I would need to hack the 2FA software and that is not something I am prepared to do for a number or reasons.

At the same time:
(a) I expect most if not all users to have 2FA enabled; and
(b) why do we want to give a scammer a road map who has and has not 2FA enabled.
Exactly!
__________________
_______________________
Old Expat Beast is offline   Reply With Quote
Old 20 June 2020, 10:34 PM   #56
watchmework
"TRF" Member
 
watchmework's Avatar
 
Join Date: Jun 2017
Location: DC
Watch: 126710BLRO, 116600
Posts: 7,869
Done! This is a great feature to add to the website Steve, thanks for taking the added step to help protect everyone's accounts.
watchmework is offline   Reply With Quote
Old 23 June 2020, 12:12 PM   #57
GGGMT
2024 Pledge Member
 
GGGMT's Avatar
 
Join Date: Aug 2013
Location: Itinerant
Watch: 79010sg
Posts: 7,959
Quote:
Originally Posted by 77T View Post
Thanks much. I access multiple forums so TapaTalk actually intermediates the authentication process.


Sent from my iPhone using Tapatalk Pro

Wait so what to do on Tapatalk?


Sent from my iPhone using Tapatalk
GGGMT is offline   Reply With Quote
Old 23 June 2020, 12:16 PM   #58
77T
2024 Pledge Member
 
77T's Avatar
 
Join Date: Dec 2010
Real Name: PaulG
Location: Georgia
Posts: 40,565
Quote:
Originally Posted by GGGMT View Post
Wait so what to do on Tapatalk?


Sent from my iPhone using Tapatalk


Haven’t done anything with them thus far. No way to get to TRF’s native UserCP from TapaTalk so not able to invoke 2FA from the App...


Sent from my iPhone using Tapatalk Pro
__________________


Does anyone really know what time it is?
77T is online now   Reply With Quote
Old 23 June 2020, 12:25 PM   #59
s1mb4
"TRF" Member
 
s1mb4's Avatar
 
Join Date: Feb 2019
Location: AB/Can
Watch: It.
Posts: 149
Done

Thank you!
s1mb4 is offline   Reply With Quote
Old 23 June 2020, 12:39 PM   #60
SemperFi
"TRF" Member
 
SemperFi's Avatar
 
Join Date: Sep 2014
Real Name: Angelo
Location: Brooklyn, NY
Watch: Rolex Submariner
Posts: 42,164
I’m having some problems with the setup. If I’m using Authy why is the setup screen asking for a Google Authentication code?
__________________
Rolex Submariner
Omega Seamaster Aqua Terra
Tudor Black Bay 58 Blue
Tudor Ranger 79910
Nomos Club Datum 733
Nomos Metro 38
Stowa Flieger Classic 40

* Card carrying member of TRF's Global Association of Retro-Grouch-Curmudgeons *
SemperFi is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Takuya Watches

Bobs Watches

My Watch LLC

OCWatches

DavidSW Watches

Coronet


*Banners Of The Month*
This space is provided to horological resources.





Copyright ©2004-2024, The Rolex Forums. All Rights Reserved.

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Rolex is a registered trademark of ROLEX USA. The Rolex Forums is not affiliated with ROLEX USA in any way.