cb25
Posts: 3,528 
Likes: 2,668
|
Post by cb25 on Oct 25, 2018 8:01:00 GMT
Cautious optimism it is then!  Thank you. You've likely seen the email about 2FA becoming mandatory for all lenders. No. When was it sent?
|
|
bigfoot12
Member of DD Central
Posts: 1,817
Likes: 816
|
Post by bigfoot12 on Oct 25, 2018 8:13:41 GMT
You've likely seen the email about 2FA becoming mandatory for all lenders. No. When was it sent? I got mine yesterday evening, but I don't have 2FA set up yet, so it may be different for others.
|
|
|
|
Post by chris on Oct 25, 2018 8:21:16 GMT
I got mine yesterday evening, but I don't have 2FA set up yet, so it may be different for others. Yeah I believe it was only sent to those affected.
|
|
tarq
Member of DD Central
Posts: 126
Likes: 28
|
Post by tarq on Oct 25, 2018 8:34:23 GMT
So far I've just ignored this. I have no mobile reception so wouldn't work for me.
If I don't do it will I still be able to run the account, as long as I don't want to withdraw or change anything?
I really can't be bothered with it, seems like a step too far!
|
|
|
|
Post by investor1925 on Oct 25, 2018 8:57:59 GMT
Thanks Chris. Any idea when that will be? Monday 5th November I believe. Chris I have a non smart mobile & never use it for anything but phone calls & texts, but I have a good signal at home I am not going to put Authy on my PC. Can I just use my non smart mobile for 2FA as is the case with my bank & mobile providers etc. as I find this simple, easy & quick.
|
|
ceejay
Posts: 975
Likes: 1,149
|
Post by ceejay on Oct 25, 2018 8:59:48 GMT
So far I've just ignored this. I have no mobile reception so wouldn't work for me. If I don't do it will I still be able to run the account, as long as I don't want to withdraw or change anything? I really can't be bothered with it, seems like a step too far! If you have a working landline and internet connection then I think you're ok - I succumbed to the pressure and registered one of our accounts yesterday without a mobile being involved. Having said that, the process was convoluted and unhelpful and I can't say that I'm confident that I will be able to do the "restricted" activities when the time comes. The documentation regarding Authy is astonishingly poor.
If you don't do it, AIUI, you will shortly be prevented from logging in, which would not be ideal.
|
|
|
|
Post by chris on Oct 25, 2018 9:11:51 GMT
So far I've just ignored this. I have no mobile reception so wouldn't work for me. If I don't do it will I still be able to run the account, as long as I don't want to withdraw or change anything? I really can't be bothered with it, seems like a step too far! If you have a working landline and internet connection then I think you're ok - I succumbed to the pressure and registered one of our accounts yesterday without a mobile being involved. Having said that, the process was convoluted and unhelpful and I can't say that I'm confident that I will be able to do the "restricted" activities when the time comes. The documentation regarding Authy is astonishingly poor.
If you don't do it, AIUI, you will shortly be prevented from logging in, which would not be ideal.
Can you let me know what you found convoluted and undocumented so that we can improve the system. Having used 2FA in many places there's not a lot I can think of that we can improve, and Authy themselves are using us as a case study for how it should be done. So any additional guidance would be welcome. It's worth adding that with the opt-out on login you can delay your next request for 2FA for up to 30 days (deleting or blocking your cookies will reset that timer), and for those using the Authy app or plugin you don't need to copy the code any more - you just authorise the request in the app and website lets you through.
|
|
|
|
Post by chris on Oct 25, 2018 9:17:47 GMT
investor1925 - you can use SMS so you should be fine. Once set up you could also use the Authy browser plugin. tarq - once you're set up with Authy you can use their browser plugin or their mobile app even without a signal. You'll just have to copy the authorisation code across with the mobile app. The lender desk should be able to guide you through setting your account up using your landline. 2FA will be a basic requirement for using the site from 5th November onwards. It's a vital part of site security, and built into our processes for things like designated bank accounts. I'd expect all our peers to be working on similar solutions.
|
|
|
|
Post by Butch Cassidy on Oct 25, 2018 9:24:31 GMT
For those without a mobile phone & having an ex-directory landline this is likely to be the final straw; downloading apps to a PC & giving away personal data is a non-starter for some people - I just don't buy this "one size fits all" approach & whilst this might be the best available & most cutting edge technology, reminds me of Betamax videos, it simply will not suit everyone. For AC to impose this solution across the board is a short sighted & self defeating proposition which ought to be rethought immediately; as a shareholder I find this most disappointing in the extreme & as a lender I will be selling up & withdrawing my entire portfolio if this happens. Driving customers away is simply a stupid business model & I can't support it.
|
|
|
|
Post by chris on Oct 25, 2018 9:30:39 GMT
For those without a mobile phone & having an ex-directory landline this is likely to be the final straw; downloading apps to a PC & giving away personal data is a non-starter for some people - I just don't buy this "one size fits all" approach & whilst this might be the best available & most cutting edge technology, reminds me of Betamax videos, it simply will not suit everyone. For AC to impose this solution across the board is a short sighted & self defeating proposition which ought to be rethought immediately; as a shareholder I find this most disappointing in the extreme & as a lender I will be selling up & withdrawing my entire portfolio if this happens. Driving customers away is simply a stupid business model & I can't support it. That's always your choice as a lender. For new registrants between 0 and 2% of people drop out at the 2FA stage in any given month, and it's been compulsory there for a while. I'm sympathetic to those that see this as a burden and wish the sign up process could be easier, but once it's set up you only need to interact with it once a month for logins and if you do something like withdrawing or changing your personal details where the additional security is required. That shouldn't be too much of a burden compared to the benefits it brings.
|
|
|
|
Post by chris on Oct 25, 2018 9:32:59 GMT
Badly Drawn Stickman - time will tell but I wonder how quickly you think they will change their minds after suffering their first hacked lender account that suffers a financial loss? I'd rather be preemptive when it comes to security, from how our servers are set up and hosted all the way through to how we handle lender account security.
|
|
archie
Posts: 1,866
Likes: 1,861
|
Post by archie on Oct 25, 2018 9:33:19 GMT
Will Assetz Exchange have 2fa?
|
|
|
|
Post by chris on Oct 25, 2018 9:35:35 GMT
Will Assetz Exchange have 2fa? No idea I'm not involved.
|
|
littleoldlady
Member of DD Central
Running down all platforms due to age
Posts: 3,045
Likes: 1,862
|
Post by littleoldlady on Oct 25, 2018 9:55:19 GMT
Has anybody managed to get Authy working? Am I the only idiot? (BTW I started working in the computer industry in 1960 so I can have no excuse if I am the only one who has failed.) Edit: It wasn't like this in 1960. Attachments:
|
|
|
|
Post by chris on Oct 25, 2018 9:57:23 GMT
Has anybody managed to get Authy working? Am I the only idiot? (BTW I started working in the computer industry in 1960 so I can have no excuse if I am the only one who has failed.) Have you contacted the lender support desk? They should be able to talk you through the process.
|
|
Thank you.
