Two Factor Authentication

  • 11
  • Question
  • Updated 4 days ago
Are there any plans for Two Factor Authentication? Preferably based on something compatible with the Google Authenticator App? https://en.wikipedia.org/wiki/Google_...
Photo of karit

karit

  • 8 Posts
  • 0 Reply Likes

Posted 5 years ago

  • 11
Photo of Jared S

Jared S

  • 1 Post
  • 0 Reply Likes
I am also interested in Two Factor Authentication, at least as a premium feature because it is a non-trivial task to implement. I don't know of any web based RSS readers that offer this feature, so it would a unique selling point for NewsBlur.
Photo of Kerim Satirli

Kerim Satirli

  • 2 Posts
  • 0 Reply Likes
I'm interested: what do you see as the added advantage of having MFA in Newsblur?

The fact that you suggest it, to me, suggests that you are not the kind of user that would use the same password on multiple sites, meaning if your Newsblur account were to be compromised, you would not have to fear for your complete online persona.

Given the social aspect of Newsblur, some people are already able to see what you read (and yes, I know: some people are not EVERYONE) and of course: I do understand why you would want to protect your reading list with a single factor, but I'd love to learn why you would want two, other than that it is a USP *

keeping in mind that the dev team of Newsblur is in the single digits and has a sizable backlog of other features to work on
Photo of Samuel Clay

Samuel Clay, Official Rep

  • 6399 Posts
  • 1457 Reply Likes
Hey, if features didn't cost me anything to build, I'd have 2FA in as an option. But it's not compelling enough to go before my other feature priorities (offline is shipping soon, saved story tagging and the batch organizer are next).
Photo of bitsculptor

bitsculptor

  • 5 Posts
  • 0 Reply Likes
I feel pretty strongly about the need for 2FA on any account that holds private information or retains digital content for me. (It drives me nuts that Amazon doesn't have it for their cloud-based consumer offerings.) Even so, I'm not even sure I'd bother enabling it on NewsBlur, even if you had it. There really isn't much damage to be done if someone did get my password.

My personal take aside, I read an article on VentureBeat recently about a company that offers free 2FA service on a couple of platforms. I doubt those apply here, but in the article it mentioned a couple of open source projects dedicated to the feature: dynalogin and wikid.

Here is the article: http://venturebeat.com/2013/07/18/swi...
Photo of denubisx

denubisx

  • 21 Posts
  • 1 Reply Like
I'd like to ping this again, just to make sure it doesn't drop off the bottom of the feature list. 2 years in here are some resources (just in case it suggests changes in time investment priority):

https://www.twilio.com/blog/2013/04/add-two-factor-authentication-to-your-website-with-google-authen...
https://github.com/pyotp/pyotp
FIDO Server libraries


On the other hand, I can imagine the cust-service fun that this generates, so... hopefully these resources are grist for the mill.
(Edited)
Photo of Technicalleigh

Technicalleigh

  • 30 Posts
  • 7 Reply Likes
I would absolutely enable 2FA if it were a premium feature for Newsblur. I consider my full list of subscriptions and saved stories to be private and very revealing (even considering how much I share on the platform). And while the social community here isn't enormous, I'd still be plenty upset if someone were to use my account for saying nefarious things.

(Plus I suspect Newsblur has a much more tech-savvy audience than a typical website/app, full of people who appreciate better security.)
Photo of David Ross

David Ross

  • 6 Posts
  • 1 Reply Like
Is there any chance this could be revisited? I just noticed that the homepage doesn't automatically redirect over to HTTPS, which could be an issue with new/upcoming versions of Chrome & Firefox.
Photo of Josh

Josh

  • 25 Posts
  • 0 Reply Likes
David, if you want it to use HTTPS you can enable that in the Preferences, General tab, SSL section.