Compatibility with Authy for Steam Auth codes

[Snake_4K]

Sometimes you don't wanna have a lot of authentication apps installed.

[Spawn of Totoro]

Authy will not allow for the confirmation of trades like the Steam app does.

[Snake_4K]

Spawn of Totoro eredeti hozzászólása:

Authy will not allow for the confirmation of trades like the Steam app does.

Yeah. I forgot about that. I don't trade a lot.

[Snake_4K]

Spawn of Totoro eredeti hozzászólása:

Authy will not allow for the confirmation of trades like the Steam app does.

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

[Satoru]

Lion_4K eredeti hozzászólása:

Spawn of Totoro eredeti hozzászólása:

Authy will not allow for the confirmation of trades like the Steam app does.

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

[Snake_4K]

Satoru eredeti hozzászólása:

Lion_4K eredeti hozzászólása:

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

It does shows contents of what is being authorized.

[Brujeira]

Lion_4K eredeti hozzászólása:

Satoru eredeti hozzászólása:

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

It does shows contents of what is being authorized.

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

[Snake_4K]

Brujeira eredeti hozzászólása:

Lion_4K eredeti hozzászólása:

It does shows contents of what is being authorized.

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

[cSg|mc-Hotsauce]

Lion_4K eredeti hozzászólása:

If they were to charge, do you think these companies would pay, having their own auth apps?

It is for total control of their own system. Why use another's app when you can make your own and have complete control over it and its design?

[Snake_4K]

cSg|mc-Hotsauce eredeti hozzászólása:

Lion_4K eredeti hozzászólása:

If they were to charge, do you think these companies would pay, having their own auth apps?

It is for total control of their own system. Why use another's app when you can make your own and have complete control over it and its design?

:qr:

Hey nice emoji !

[Brujeira]

Lion_4K eredeti hozzászólása:

Brujeira eredeti hozzászólása:

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

[Snake_4K]

Brujeira eredeti hozzászólása:

Lion_4K eredeti hozzászólása:

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

Exacly Steam would most likely not be charged either.

[Brujeira]

Lion_4K eredeti hozzászólása:

Brujeira eredeti hozzászólása:

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

Exacly Steam would most likely not be charged either.

Steam is not a big company like those three. They would be charged.

[Snake_4K]

Brujeira eredeti hozzászólása:

Lion_4K eredeti hozzászólása:

Exacly Steam would most likely not be charged either.

Steam is not a big company like those three. They would be charged.

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

[Brujeira]

Lion_4K eredeti hozzászólása:

Brujeira eredeti hozzászólása:

Steam is not a big company like those three. They would be charged.

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

Thanks for proving my point.

Facebook - 2.2 billion monthly active users, net worth $500bn (as of July 2017)
Google - 1 billion active users for GMail alone, net worth $600bn (worth of parent company Alphabet as of November 2017)
Microsoft - 400 million active users for Outlook alone, net worth $560bn (as of December 2017)

Valve - 67 million monthly active accounts, probably around 40 million monthly active users. Net worth probably around $5-6bn.

Valve are not a big company.

[Snake_4K]

Brujeira eredeti hozzászólása:

Lion_4K eredeti hozzászólása:

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

Thanks for proving my point.

Facebook - 2.2 billion monthly active users, net worth $500bn (as of July 2017)
Google - 1 billion active users for GMail alone, net worth $600bn (worth of parent company Alphabet as of November 2017)
Microsoft - 400 million active users for Outlook alone, net worth $560bn (as of December 2017)

Valve - 67 million monthly active accounts, probably around 40 million monthly active users. Net worth probably around $5-6bn.

Valve are not a big company.

OK, still not small enough to be charged imho