Thanks, Chris. I'm beginning to understand it now.
Carol P
----- Original Message -----
From: "Christopher Hallsworth" <[email protected]>
To: <[email protected]>
Sent: Wednesday, December 10, 2014 2:56 PM
Subject: Re: enabling 2 step
Hi Carol P and all,
When you start to enable two step verification, you are told that this
will replace answering your security questions. So the page will answer
your question.
On 10/12/2014 12:59, [email protected] wrote:
OK, so I know how to enable two step verification. Are there only the two
methods - one using the questions and answers and one this method?
If you use both methods, do you have to provide both the two-step and
answers to questions if you need to reset a password?
Carol P
----- Original Message -----
From: Kliph
To: [email protected]
Sent: Wednesday, December 10, 2014 3:45 AM
Subject: Re: enabling 2 step
Go to appleid.apple.com
sign in, go to security options, and find 2 step barification.
Frustrated with your Mac, I-device, or AppleTV? New user and want
quick efficient answers? Or maybe you know apple products and want to
contribute? Then come join a list where questions are always answered,
and we are always patient with you.
Subscribe here: [email protected]
Or just follow us on twitter https://twitter.com/PealTheApple
And ask your question there. All are welcome!
On Dec 9, 2014, at 10:40 PM, Kerri G <[email protected]> wrote:
I have an idiotic question: how does one enable 2 step?
On Dec 9, 2014, at 3:36 PM, Raul A. Gallegos
<[email protected]> wrote:
I don't agree withthis as the Darkside of apple's 2 step
authentication for your safety. If people cannot be responsible to keep
their security unlock key in a safe place then that is not apple's fault.
I have the service enabled and I have all my safe recovery keys in an area
that I can get to from either my iPhone or my computer or my iPad. I would
have to experience a complete shutdown and lack of access from my Windows
machine as well as my Apple devices in order for me to not have access to
that key.
I understand there can be some annoyance with too much security,
however anytime extra security measures are added the companies that are
offering the services are very clear about you needing to keep any sort of
recovery keys available to you at all times.
On Dec 9, 2014, at 2:10 PM, M. Taylor <[email protected]> wrote:
Hello Everyone,
I strongly suggest that you read the following article, very
carefully.
The link to the original post may be found at the end of the
text.
Mark
The dark side of Apple's two-factor authentication
Earlier this week, a strange message popped up on my Mac that I
thought
nothing of. "You can't sign in because your account was disabled
for
security reasons." I dismissed it in my tired haze, thinking it
would solve
itself and went to sleep.
The next morning, I didn't have time to deal with the message -
which was
now popping up every half hour - for a few hours until it became
annoying. I
figured I'd done something dumb and broken iCloud, but that it
could wait.
I'd turned two-factor on my Apple ID in haste when I read Mat
Honan's
harrowing story about how his Mac, iPhone and other devices were
wiped when
someone broke into his iCloud account. That terrified me into
thinking about
real security for the first time.
When I finally had time to investigate the errors appearing on my
machine, I
discovered that not only had my iCloud account been locked, but
someone had
tried to break in. Two-factor had done its job and kept the
attacker out,
however, it had also inadvertently locked me out.
The Apple support page relating to lockouts assured me it would
be easy to
recover my account with a combination of any two of either my
password, a
trusted device or the two-factor recovery key.
When I headed to the account recovery service, dubbed iForgot, I
discovered
that there was no way back in without my recovery key. That's
when it hit
me; I had no idea where my recovery key was or if I'd ever even
put the
piece of paper in a safe place. I've moved since I set up
two-factor on
iCloud.
I began nervously scouring the entire house for the code, before
giving up
after a few frustrating hours and began searching my computer for
any trace
of it. I found countless "recovery keys" but they weren't for the
right
things; for my Mac's hard-drive encryption, Twitter, Facebook and
other
accounts, but not for my Apple ID.
How could I be foolish enough to misplace my Apple ID recovery
key?
I swore that I'd taken a screenshot, printed it and had taken a
photo of it
with my iPhone for extra safekeeping.
This is when it began to sink in that this single ID held the
keys to much
of my digital life; everything from iTunes purchases going back
seven years,
app purchases and even the ability to get my iPhone out of the
grips of Find
my iPhone's lock.
The sinking feeling began. After fruitlessly searching and a lot
of cussing,
I decided to call Apple. I figured that something must be wrong,
since the
support page claims you can use trusted devices to recover your
ID in cases
like this.
The first person I spoke to told me immediately after getting on
the phone
that in no uncertain terms I had forfeit my Apple ID by losing
the recovery
key. He refused to help me. I hung up and called back.
On the second call, I got a lovely woman who totally understood
my plight
and how terrible it was. She told me a similar thing had happened
to her,
and it had turned out OK. After 20 minutes of poking around and
lots of
awkward sighing, she put me on hold to talk to a senior manager.
When she got back on the line, the story was just as bleak. "We
take your
security very seriously at Apple" she told me "but at this time
we cannot
grant you access back into your Apple account. We recommend you
create a new
Apple ID."
I couldn't believe what I was hearing and fought back that surely
there was
some other way, but I was told point blank that Apple would not
help me. I
offered a scan of my government ID, my trusted devices and other
proof that
it was me. Nope, that won't do for Apple in this situation. She
apologized
profusely and said there was nothing more should do.
Furious about the situation, I took to Twitter in a fit of rage,
complaining
that Apple couldn't help me out of a dumb situation, in which I
could easily
prove who I was. It was frustrating enough that when setting up
my Apple ID,
the company assured me I could recover the account with a trusted
device.
I know it was stupid that I'd lost the recovery key but I'd set
it up so
long ago I couldn't remember where it would conceivably be.
There's only so
many things I can keep track of. Besides, I figured I'd be able
to use
trusted device to get out of a mess like this.
I'd looked almost everywhere twice by this point. Who remembers
stuff like
this?
Apple's two factor signup process tries to point out the
importance of the
key when you set it up.
You have to print the key, then re-enter it to show that you've
got it. I
don't think this step existed when it launched.
So, I pushed on, resuming the hunt. As 24 hours without my Apple
ID
approached, iMessage broke and my devices all started incessantly
complaining that the account was locked, amplifying an already
frustrating
situation.
Figuring that maybe I'd just had bad luck with the phone, I tried
Apple's
online chat service. I got the exact same answer; "We take your
security
very seriously at Apple, but we cannot help in this situation." I
pointed
out that the security page said otherwise, so the chat person put
me on the
phone with an iTunes senior advisor.
After a few minutes of "uhhhh" on the other end of the phone, I
got my third
"we take your security very seriously at Apple, this account will
be
permanently disabled unless you can find the recovery key." I
argued my
point that I had both my trusted devices and my password as
required by the
support page, but was told this was irrelevant because someone
else had
tried to get into my account.
I talked to a friend who knew people at Apple who told me that
the security
folks said the iForgot page is final. There's nothing they can
do.
Basically, I was locked out of my entire digital life, because
someone had
tried to hack me. The irony of the fact that my increased
security had
ultimately locked me out dawned on me, mixed with tiredness and
frustration,
so after taking a moment to scream internally, I started
furiously searching
ancient time machine backups.
As I searched the depths of my time machine backups and was on
the phone for
the fifth (or even sixth) time to iCloud support, I found an old
picture I'd
taken on my iPhone of a screen. It was my recovery key. I started
crying
tears of joy at this point. The Apple rep on the phone started
clapping and
was very glad to get out of continuing to argue with me.
The only time I've ever been glad to have taken a picture of my
screen
If I hadn't managed to find this key or had never bothered to
save it in the
first place, I would have lost the Apple ID forever. If I hadn't
made a time
machine backup of my machine before it got corrupted earlier this
year, I'd
have been out of luck entirely.
Apple support told me that the security lock doesn't expire, so
there's no
way to get around requiring the key, even though its support site
says you
can use trusted devices. You're simply not given that option when
your
account is locked.
What's perplexing is it wasn't even technically my fault. Someone
tried to
guess their way into my account and it was locked as a result; I
didn't do
anything wrong, yet I was entirely locked out because I couldn't
find the
key.
Apple's support page had given me false hope, because I expected
to be able
to use a combination of my password and trusted devices to
recover from
being locked out if it ever happened.
This isn't the case when your account is locked; what Apple
doesn't tell you
is that when your account is locked (because of too many
attempts) your
password is not a valid recovery option and you'll need your
recovery key.
What if I was carrying the key in my wallet and I was robbed,
like this poor
user on Stack Overflow? Apple still wouldn't (or couldn't) help
you, because
it's "impossible" to recover an Apple ID without that key,
according to its
support staff.
Apple's changing security policy
One has to wonder if it was previously possible, before Mat's
social
engineering hack or the iCloud celebrity hackings took place, to
recover a
two-factor enabled account by using Apple Support. The "we take
your
security very seriously at Apple" line seems like it's been
rehearsed and
drilled into the support staff's heads so that the same scandals
don't
happen again.
I asked Apple PR about this situation, who told me that the
support article
is correct. If you lose your recovery key with two factor
enabled, you lose
your account. Apple can't help you.
I've learnt my lesson about treating recovery keys with extreme
caution from
this. I never knew that I'd have no hope of recovery if it was
lost; I'd
been lulled into a false sense of security, figuring that my
trusted devices
would get me back into locked account.
From now on, I'll know exactly where each recovery key is. I urge
you to do
the same.
http://thenextweb.com/apple/2014/12/08/lost-apple-id-learnt-hard-way-careful
-two-factor-authentication/
--
The following information is important for all members of the
viphone list. All new members to the this list are moderated by default.
If you have any questions or concerns about the running of this list, or
if you feel that a member's post is inappropriate, please contact the
owners or moderators directly rather than posting on the list itself. The
archives for this list can be searched at
http://www.mail-archive.com/[email protected]/.
---
You received this message because you are subscribed to the
Google Groups "VIPhone" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/viphone.
For more options, visit https://groups.google.com/d/optout.
--
The following information is important for all members of the
viphone list. All new members to the this list are moderated by default.
If you have any questions or concerns about the running of this list, or
if you feel that a member's post is inappropriate, please contact the
owners or moderators directly rather than posting on the list itself. The
archives for this list can be searched at
http://www.mail-archive.com/[email protected]/.
---
You received this message because you are subscribed to the Google
Groups "VIPhone" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/viphone.
For more options, visit https://groups.google.com/d/optout.
--
The following information is important for all members of the viphone
list. All new members to the this list are moderated by default. If you
have any questions or concerns about the running of this list, or if you
feel that a member's post is inappropriate, please contact the owners or
moderators directly rather than posting on the list itself. The archives
for this list can be searched at
http://www.mail-archive.com/[email protected]/.
---
You received this message because you are subscribed to the Google
Groups "VIPhone" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/viphone.
For more options, visit https://groups.google.com/d/optout.
--
The following information is important for all members of the viphone
list. All new members to the this list are moderated by default. If you
have any questions or concerns about the running of this list, or if you
feel that a member's post is inappropriate, please contact the owners or
moderators directly rather than posting on the list itself. The archives
for this list can be searched at
http://www.mail-archive.com/[email protected]/.
---
You received this message because you are subscribed to the Google
Groups "VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/viphone.
For more options, visit https://groups.google.com/d/optout.
--
The following information is important for all members of the viphone list.
All new members to the this list are moderated by default. If you have any
questions or concerns about the running of this list, or if you feel that a
member's post is inappropriate, please contact the owners or moderators
directly rather than posting on the list itself. The archives for this list
can be searched at http://www.mail-archive.com/[email protected]/.
---
You received this message because you are subscribed to the Google Groups
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/viphone.
For more options, visit https://groups.google.com/d/optout.
--
The following information is important for all members of the viphone list. All
new members to the this list are moderated by default. If you have any
questions or concerns about the running of this list, or if you feel that a
member's post is inappropriate, please contact the owners or moderators
directly rather than posting on the list itself. The archives for this list can
be searched at http://www.mail-archive.com/[email protected]/.
---
You received this message because you are subscribed to the Google Groups "VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/viphone.
For more options, visit https://groups.google.com/d/optout.
