DEF CON Forum Site Header Art

2FA / TOTP authentication on Defcon Forums

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • iampaigeat
    Member
    • Apr 2023
    • 2

    #1

    2FA / TOTP authentication on Defcon Forums

    Any chance we could see this option get added to the Forums optionally for users? I'm up to 42 TOTP shared secrets myself.
  • number6
    404 Image not found
    • Apr 2019
    • 2172

    #2
    The vendor has a feature request to add Time-based OTP since 2021 for regular users, but no movement on that request for about 2 years.
    Forum moderators and forum admin can enable 2FA, but not regular users yet.
    HTH

    Comment

    • iampaigeat
      Member
      • Apr 2023
      • 2

      #3
      Ah interesting, yeah I think this is vBulletin and that there are some changes that have to be made to the inc.php file for it to work so that would explain the need for an admin to do it. Given that it will probably also require a SQL migration to add missing fields required for it to work as well.

      Also for me at least, finding a decent means to use TOTP that doesn't cost money or lock me into a platform wasn't exactly obvious:

      iOS: https://keepassium.com
      Android: https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.free&hl=en_US&pli =1
      https://www.yubico.com/product/yubikey-5ci/

      understandably it's hard to want to encourage people to do this, because it's a whole different kind of responsibility to keep backups of your own, and I'm not really inclined to encourage people to use Microsoft or Google Authenticator either because both of them will lock you into their platform. So I wonder if there's a similar school of thought behind why it just hasn't been turned on so far.

      Comment

      Working...