Ip verify when login

[Zachery]

Originally Posted by aloha

AOL has that security feature key, could this be implemented INSTEAD of the IP verification? So that we can use this passcode key to login? That would own. :devious: I used to work for them in the customer service department and this would be how we logged in from our homes and so forth... I've never had any of my accounts compromised in any shape or form. It's now a premium feature on AOL for those that want an extra layer of security on their account.

I believe its ran by RSA Security.

So a second password?

[aloha]

Yes basically. But there is a big difference with a 'second password' and this feature that I'm talking about... What happens is that this passkey generates a new password for you every 15 - 30 seconds. You wear this passkey on your keychain or whatever, if you lose it you can easily call them to reset it, but I don't lose my keys so I never have a problem with that. I think this would be an excellent second layer of protection for superadmins and those with query permissions.

You log in with your current password, + the new generated passcode key in order to be able to access the account. Otherwise your locked out until you call in and have them reset it.

I'd love that as a vb extra.

[Zachery]

Originally Posted by aloha

Yes basically. But there is a big difference with a 'second password' and this feature that I'm talking about... What happens is that this passkey generates a new password for you every 15 - 30 seconds. You wear this passkey on your keychain or whatever, if you lose it you can easily call them to reset it, but I don't lose my keys so I never have a problem with that. I think this would be an excellent second layer of protection for superadmins and those with query permissions.

You log in with your current password, + the new generated passcode key in order to be able to access the account. Otherwise your locked out until you call in and have them reset it.

I'd love that as a vb extra.

I still don't get it....

[Skyline_GT]

Yea. any way to increase the security would be great..

[Zachery]

Originally Posted by Skyline_GT

Yea. any way to increase the security would be great..

then add 8 more passwords and email verifcation everytime someone logs in, ontop of that, only let them login if the mac address matches.

[Paul M]

Originally Posted by Zachery

then add 8 more passwords and email verifcation everytime someone logs in, ontop of that, only let them login if the mac address matches.

Sounds like someone is being silly. IP verification can be useful IF you have a static ip (like on a corporate network). I would guess not all vb installations are public ......

[Zachery]

I understand that, the point im trying to make is, vB already provides alot of security as it is.

Unless you have an easy to guess password, even the administrator can't find out what it is (without hacking, assuming they have left the current system in place).

Adding another password, ect, is worthless, because then its just a matter of finding out another peice of data.

If you need more security, it gets harder after requring a password and a username.. esp online

[jugo]

I totally agree with Zachery.

I thnk that if people spent a little more time creating hard to crack password , they may not have as much problems with people cracking their accounts.

And forum admins would have more time to improve the boards.

I think if you want your system to be that much more secure, stick it behind a VPN and create VPN tunnels for your users.