Compatibility with Authy for Steam Auth codes

[Snake_4K]

Sometimes you don't wanna have a lot of authentication apps installed.

[Spawn of Totoro]

Authy will not allow for the confirmation of trades like the Steam app does.

[Snake_4K]

Originally posted by Spawn of Totoro:

Authy will not allow for the confirmation of trades like the Steam app does.

Yeah. I forgot about that. I don't trade a lot.

[Snake_4K]

Originally posted by Spawn of Totoro:

Authy will not allow for the confirmation of trades like the Steam app does.

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

[Satoru]

Originally posted by Lion_4K:

Originally posted by Spawn of Totoro:

Authy will not allow for the confirmation of trades like the Steam app does.

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

[Snake_4K]

Originally posted by Satoru:

Originally posted by Lion_4K:

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

It does shows contents of what is being authorized.

[Brujeira]

Originally posted by Lion_4K:

Originally posted by Satoru:

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

It does shows contents of what is being authorized.

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

[Snake_4K]

Originally posted by Brujeira:

Originally posted by Lion_4K:

It does shows contents of what is being authorized.

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

[cSg|mc-Hotsauce]

Originally posted by Lion_4K:

If they were to charge, do you think these companies would pay, having their own auth apps?

It is for total control of their own system. Why use another's app when you can make your own and have complete control over it and its design?

[Snake_4K]

Originally posted by cSg|mc-Hotsauce:

Originally posted by Lion_4K:

If they were to charge, do you think these companies would pay, having their own auth apps?

It is for total control of their own system. Why use another's app when you can make your own and have complete control over it and its design?

:qr:

Hey nice emoji !

[Brujeira]

Originally posted by Lion_4K:

Originally posted by Brujeira:

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

[Snake_4K]

Originally posted by Brujeira:

Originally posted by Lion_4K:

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

Exacly Steam would most likely not be charged either.

[Brujeira]

Originally posted by Lion_4K:

Originally posted by Brujeira:

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

Exacly Steam would most likely not be charged either.

Steam is not a big company like those three. They would be charged.

[Snake_4K]

Originally posted by Brujeira:

Originally posted by Lion_4K:

Exacly Steam would most likely not be charged either.

Steam is not a big company like those three. They would be charged.

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

[Brujeira]

Originally posted by Lion_4K:

Originally posted by Brujeira:

Steam is not a big company like those three. They would be charged.

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

Thanks for proving my point.

Facebook - 2.2 billion monthly active users, net worth $500bn (as of July 2017)
Google - 1 billion active users for GMail alone, net worth $600bn (worth of parent company Alphabet as of November 2017)
Microsoft - 400 million active users for Outlook alone, net worth $560bn (as of December 2017)

Valve - 67 million monthly active accounts, probably around 40 million monthly active users. Net worth probably around $5-6bn.

Valve are not a big company.

[Snake_4K]

Originally posted by Brujeira:

Originally posted by Lion_4K:

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

Thanks for proving my point.

Facebook - 2.2 billion monthly active users, net worth $500bn (as of July 2017)
Google - 1 billion active users for GMail alone, net worth $600bn (worth of parent company Alphabet as of November 2017)
Microsoft - 400 million active users for Outlook alone, net worth $560bn (as of December 2017)

Valve - 67 million monthly active accounts, probably around 40 million monthly active users. Net worth probably around $5-6bn.

Valve are not a big company.

OK, still not small enough to be charged imho