[atlas] 2FA

Hello,

The scope of 2FA is to use a secondary device to get the authorisation codes. We saw hacked PC’s that had Authy or any other 2FA Apps, and the attackers used those to obtain the codes and hijacked accounts.
So using a 2FA App on the same device that you’re using to login and authorise at the same time defeats the purpose of the 2FA.

We are try now to teach our users and employees to stop using desktop apps for 2FA code generators and I encourage you to do the same, even if it adds a second layer (as expected) of effort for you.

Thanks,

--
Bogdan-Stefan Rotariu



> On 25 Mar 2024, at 13:13, Ernst J. Oud <ernstoud at gmail.com> wrote:
> 
> Hi,
> 
> I enabled 2FA for Atlas website access. Works fine on my iPad and Android phone, using the Google Authenticator. However not always I have these devices with me when I want access via my Windows PC. 
> 
> I installed WinAuth on my PC but it needs the secret key that is generated when 2FA is enabled. Is there a way to get this secret key for this purpose? Tried exporting from Google Authenticator but that only supplies a QR code, not the key.
> 
> Is there a way to use both a tablet/phone and a PC for authentication?
> 
> I read that in Q1 2FA will be enforced. I am a bit amazed that there has been no further announcement in this group with some help. The page on 2FA only mentions the Oauth Toolkit for Linux. No help whatsoever for Windows users.
> 
> Any clues?
> 
> Regards,
> 
> Ernst J. Oud
> -- 
> ripe-atlas mailing list
> ripe-atlas at ripe.net
> https://mailman.ripe.net/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/ripe-atlas/attachments/20240325/bfdbba45/attachment.html>