4 ms·

Actually it's even more interesting for two-factor authorization.

• spacemanaki 15y ago
  It would only work as a alternative (definitely a more convenient one) to something like Google's two factor auth app with one time passwords, not a complete replacement. If the phone was stolen, you'd need a way to get in and shut it off. Google's system lets you save a handful of codes for this case.
• FuzzyDunlop 15y ago
  That's what I thought. Implementing it without asking for extra info from the user might be troublesome if access to a phone's UDID is restricted (I think it is with Apple now?), and I'd imagine using a QR code as the second factor might be better for people who don't want to give a service their phone number or receive texts from it. That all being said, and as interesting as it is, I'd be more interested in something that could use, say, push notifications (and Android intents specifically, unless there's an iPhone equivalent) as a smooth implementation of some sort of public key authentication.
  • vilda 15y ago
    When you activate two-factor authorization, the system can give you URL you have to visit on your phone. You then get your UID as a cookie that will serve as UDID. Push notification would work as well as SMS, but you have to install app for that.