Compatibility with Authy for Steam Auth codes

[Snake_4K]

Sometimes you don't wanna have a lot of authentication apps installed.

[Spawn of Totoro]

Authy will not allow for the confirmation of trades like the Steam app does.

[Snake_4K]

Spawn of Totoro님이 먼저 게시:

Authy will not allow for the confirmation of trades like the Steam app does.

Yeah. I forgot about that. I don't trade a lot.

[Snake_4K]

Spawn of Totoro님이 먼저 게시:

Authy will not allow for the confirmation of trades like the Steam app does.

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

[Satoru]

Lion_4K님이 먼저 게시:

Spawn of Totoro님이 먼저 게시:

Authy will not allow for the confirmation of trades like the Steam app does.

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

[Snake_4K]

Satoru님이 먼저 게시:

Lion_4K님이 먼저 게시:

I was just taking another look at authy, and I saw this:
https://image.prntscr.com/image/EfmiGZSiSXqvim8DueGUSg.png

Turns out Authy does have a request system.
That can totally works.

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

It does shows contents of what is being authorized.

[Brujeira]

Lion_4K님이 먼저 게시:

Satoru님이 먼저 게시:

No it won’t

1) you log into my fake site
2) you trade with me for an item
3) in reality the trade obliterates your inventory
4) you “authorize” the trade in Authy
5) I own everything

I can simply pass through all the authorizations and you’re totally screwed

The Authenticator is required to show the contents of the trade so you are not victim to a man in the middle attack

It does shows contents of what is being authorized.

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

[Snake_4K]

Brujeira님이 먼저 게시:

Lion_4K님이 먼저 게시:

It does shows contents of what is being authorized.

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

[cSg|mc-Hotsauce]

Lion_4K님이 먼저 게시:

If they were to charge, do you think these companies would pay, having their own auth apps?

It is for total control of their own system. Why use another's app when you can make your own and have complete control over it and its design?

[Snake_4K]

cSg|mc-Hotsauce님이 먼저 게시:

Lion_4K님이 먼저 게시:

If they were to charge, do you think these companies would pay, having their own auth apps?

It is for total control of their own system. Why use another's app when you can make your own and have complete control over it and its design?

:qr:

Hey nice emoji !

[Brujeira]

Lion_4K님이 먼저 게시:

Brujeira님이 먼저 게시:

OK, hypothetical situation. Suppose that the request system shows sufficient detail to allow it to be used to facilitate a Steam trade safely and with the same high level of security that you currenty get from the Steam app itself. OK, well... that just leaves one important question then.

Who's going to pay for it?

The Authy app is free to end users but the service is not free to the company using it. Even if the charge is only a couple of cents per auth/trade, you're still potentially looking at hundreds of thousands of dollars in charges to Valve per year instead of almost no cost if they just stick with their own app. Can't see Valve going for that, can you? And no, users won't accept the charges being passed on to them either.

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

[Snake_4K]

Brujeira님이 먼저 게시:

Lion_4K님이 먼저 게시:

Thats a fair point.
However, Authy does not charge anyone, bc Google, Facebook, Microsoft, all of them have their own authenticators, and Authy works with them all.

If they were to charge, do you think these companies would pay, having their own auth apps?

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

Exacly Steam would most likely not be charged either.

[Brujeira]

Lion_4K님이 먼저 게시:

Brujeira님이 먼저 게시:

I rather think that it’s Authy who pays them as a 2FA app that doesn’t work for those specific services won’t get off the ground. Every other company has to pay - and yes, Authy do charge for their service.

https://www.twilio.com/authy/pricing

Exacly Steam would most likely not be charged either.

Steam is not a big company like those three. They would be charged.

[Snake_4K]

Brujeira님이 먼저 게시:

Lion_4K님이 먼저 게시:

Exacly Steam would most likely not be charged either.

Steam is not a big company like those three. They would be charged.

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

[Brujeira]

Lion_4K님이 먼저 게시:

Brujeira님이 먼저 게시:

Steam is not a big company like those three. They would be charged.

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

Thanks for proving my point.

Facebook - 2.2 billion monthly active users, net worth $500bn (as of July 2017)
Google - 1 billion active users for GMail alone, net worth $600bn (worth of parent company Alphabet as of November 2017)
Microsoft - 400 million active users for Outlook alone, net worth $560bn (as of December 2017)

Valve - 67 million monthly active accounts, probably around 40 million monthly active users. Net worth probably around $5-6bn.

Valve are not a big company.

[Snake_4K]

Brujeira님이 먼저 게시:

Lion_4K님이 먼저 게시:

Steam is not a big company?
https://www.forbes.com/sites/oliverchiang/2011/02/15/valve-and-steam-worth-billions/#403a2d3833f4

Thanks for proving my point.

Facebook - 2.2 billion monthly active users, net worth $500bn (as of July 2017)
Google - 1 billion active users for GMail alone, net worth $600bn (worth of parent company Alphabet as of November 2017)
Microsoft - 400 million active users for Outlook alone, net worth $560bn (as of December 2017)

Valve - 67 million monthly active accounts, probably around 40 million monthly active users. Net worth probably around $5-6bn.

Valve are not a big company.

OK, still not small enough to be charged imho