Hi Chris, if I told you about some of the practices at Wells Fargo for example you’d run down and pull your money out tomorrow.:)
Some banks are very good but yes you raise as always an excellent set of
points. The trade offs are huge. Things like finger prints and other
biometrics are a help but everything has its issues.
This topic reminds me of a Department of Defense manual I read several
years back concerning the proper methods of securing a windows server. I kid
you not it required that the server be disconnected from any network services
as well as be disconnected from power and locked securely in a SCIF.;)
> On Mar 24, 2017, at 11:13 AM, 'Chris Blouch' via MacVisionaries
> <[email protected]> wrote:
>
> Just the traditional security usability tradeoff. Like door locks, you just
> want to make sure yours is tough enough to crack that the lazy bad guy moves
> on to somebody else. It's always crackable if they think the value inside is
> worth it. I can't imagine what it's like to try and do security for a Wells
> Fargo or CitiBank. You can pretty much guarantee security for your phone by
> embedding it in a chunk of concrete. Of course usability suffers ;)
>
> CB
>
> On 3/24/17 3:55 AM, Simon Fogarty wrote:
>> Yes 2 factor authentication is a great idea,
>>
>> Shame it's a pain in the ass.
>>
>> -----Original Message-----
>> From: 'Chris Blouch' via MacVisionaries
>> [mailto:[email protected]]
>> Sent: Friday, 24 March 2017 3:00 AM
>> To: [email protected]
>> Subject: Re: Apple music on android.
>>
>> In light of
>>
>> https://www.macrumors.com/2017/03/22/apple-responds-to-hack-threats/
>>
>> two-factor auth seems like a really good idea.
>>
>> CB
>>
>> On 3/23/17 4:30 AM, Scott Granados wrote:
>>> Anders, you’re intuition is correct. On native apple devices we get a
>>> separate pop up for the 2 factor response in this case the numerical
>>> portion of the response. In your case, you don’t have that specific pop up
>>> so you would respond like this. For our example say that your password is
>>> marshmallow and your response you received on an authorized device from
>>> Apple is 555333. In your password prompt you would put in one group
>>> marshmellow555333 which contains your password and then the two factor
>>> response as an appended number. The authenticator at Apple knows to strip
>>> off the last 6 digits and pass them to the second factoring mechanism and
>>> your password goes off to LDAP and the database for authentication.
>>> (Roughly so you get the idea). Let me know if that helps.
>>>
>>>> On Mar 22, 2017, at 7:06 PM, Anders Holmberg <[email protected]> wrote:
>>>>
>>>> Hi!
>>>> I don’t know if its offtopic to ask about this here but if so i appologize
>>>> and let me know that so i can ask it on the eyes-free list instead.
>>>> I try to login to my apple music account with the apple music app on
>>>> android.
>>>> However when i click the login button i get a dialog telling me to type
>>>> the password together with the 2 step verification code sent to my other
>>>> devices.
>>>> THen there is a try again button and i come back to the login screen.
>>>> I can not find any where to type the verification code.
>>>> So i am wondering if i should type the email in the e-mail field and the
>>>> password and the verification code in the password field together?
>>>> It sounds very odd to me but i want to try apple music out on my android
>>>> device.
>>>> Thanks in advance for all help.
>>>> /A
>>>>
>>>> --
>>>> The following information is important for all members of the Mac
>>>> Visionaries list.
>>>>
>>>> If you have any questions or concerns about the running of this list, or
>>>> if you feel that a member's post is inappropriate, please contact the
>>>> owners or moderators directly rather than posting on the list itself.
>>>>
>>>> Your Mac Visionaries list moderator is Mark Taylor. You can reach mark
>>>> at: [email protected] and your owner is Cara
>>>> Quinn - you can reach Cara at [email protected]
>>>>
>>>> The archives for this list can be searched at:
>>>> http://www.mail-archive.com/[email protected]/
>>>> ---
>>>> You received this message because you are subscribed to the Google Groups
>>>> "MacVisionaries" group.
>>>> To unsubscribe from this group and stop receiving emails from it, send an
>>>> email to [email protected].
>>>> To post to this group, send email to [email protected].
>>>> Visit this group at https://groups.google.com/group/macvisionaries.
>>>> For more options, visit https://groups.google.com/d/optout.
>
> --
> ¯\_(ツ)_/¯
>
> --
> The following information is important for all members of the Mac Visionaries
> list.
>
> If you have any questions or concerns about the running of this list, or if
> you feel that a member's post is inappropriate, please contact the owners or
> moderators directly rather than posting on the list itself.
>
> Your Mac Visionaries list moderator is Mark Taylor. You can reach mark at:
> [email protected] and your owner is Cara Quinn - you
> can reach Cara at [email protected]
>
> The archives for this list can be searched at:
> http://www.mail-archive.com/[email protected]/
> --- You received this message because you are subscribed to the Google Groups
> "MacVisionaries" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/macvisionaries.
> For more options, visit https://groups.google.com/d/optout.
--
The following information is important for all members of the Mac Visionaries
list.
If you have any questions or concerns about the running of this list, or if you
feel that a member's post is inappropriate, please contact the owners or
moderators directly rather than posting on the list itself.
Your Mac Visionaries list moderator is Mark Taylor. You can reach mark at:
[email protected] and your owner is Cara Quinn - you
can reach Cara at [email protected]
The archives for this list can be searched at:
http://www.mail-archive.com/[email protected]/
---
You received this message because you are subscribed to the Google Groups
"MacVisionaries" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/macvisionaries.
For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: Message signed with OpenPGP
