Fwd: Getting started with login verification | Twitter Blog

[Owen Densmore]

OK, Twitter now has 2-factor auth.  But does it matter?  I use 2-factor with Google 'cause I store data on their system, make docs, have my email, and so on.  But Twitter, really?  Do I care?

https://blog.twitter.com/2013/getting-started-login

-verification

Anyone on top of this, especially for motivation?

   -- Owen

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

[Parks, Raymond]

In an amazing coincidence, we were just talking about why Twitter would matter in a different context.

You may have seen the WSJ origin of this -

http://hotair.com/archives/2013/08/06/traders-sneaking-peeks-at-government-economic-reports/

There was a mention of Sandia's work for Bureau of Labor a while back in the press - we reluctantly red-teamed their pressroom security.  We told them that this was possible and even likely.

So the last couple of days, we've been passing this article around in email and making cracks about it.  One of our original recommendations was to move from the 1960 pressroom model to a 21st Century Internet model.  In the email chain, one of us joked that they'd be better off just using Twitter - to which I replied that their adversary model would then be Guccifer and Syrian Electronic Army.

Just imagine if the Friday morning government economic news came out via Twitter - authentication on Twitter really would matter.

Ray Parks

Consilient Heuristician/IDART Program Manager

V: 505-844-4024  M: 505-238-9359  P: 505-951-6084

NIPR: [hidden email]

SIPR: [hidden email] (send NIPR reminder)

JWICS: [hidden email] (send NIPR reminder)

On Aug 7, 2013, at 7:15 PM, Owen Densmore wrote:

OK, Twitter now has 2-factor auth.  But does it matter?  I use 2-factor with Google 'cause I store data on their system, make docs, have my email, and so on.  But Twitter, really?  Do I care?

https://blog.twitter.com/2013/getting-started-login

-verification

Anyone on top of this, especially for motivation?

   -- Owen

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

[Owen Densmore]

Way cool!  

I'm finding that my "information ratio" is around 6:1 measured by twitter:search saves to pinboard (a Delicious-like personal URL saving site).  By that I mean that I store 6 URLs from twitter conversations (& transitive closure) for every 1 Google search I want to save.

I read an article recently that many demographics have the same phenomenon .. basically social media (twitter, FB, G+) are their primary source of information, and the web search is low on their list.

Partly I think that is because the web is so huge that phrasing a search request well is tough.

Anyway, interesting that Twitter just might have a reason for 2-factor auth.  Google does a good job, with a small app too rather than only sms for the pin.

   -- Owen 

On Fri, Aug 9, 2013 at 10:54 AM, Parks, Raymond <[hidden email]> wrote:

In an amazing coincidence, we were just talking about why Twitter would matter in a different context.

You may have seen the WSJ origin of this -

http://hotair.com/archives/2013/08/06/traders-sneaking-peeks-at-government-economic-reports/

There was a mention of Sandia's work for Bureau of Labor a while back in the press - we reluctantly red-teamed their pressroom security.  We told them that this was possible and even likely.

So the last couple of days, we've been passing this article around in email and making cracks about it.  One of our original recommendations was to move from the 1960 pressroom model to a 21st Century Internet model.  In the email chain, one of us joked that they'd be better off just using Twitter - to which I replied that their adversary model would then be Guccifer and Syrian Electronic Army.

Just imagine if the Friday morning government economic news came out via Twitter - authentication on Twitter really would matter.

Ray Parks

Consilient Heuristician/IDART Program Manager

V: <a href="tel:[phone]" value="[phone]" target="_blank">505-844-4024  M: <a href="tel:[phone]" value="[phone]" target="_blank">505-238-9359  P: <a href="tel:[phone]" value="[phone]" target="_blank">505-951-6084

NIPR: [hidden email]

SIPR: [hidden email] (send NIPR reminder)

JWICS: [hidden email] (send NIPR reminder)

On Aug 7, 2013, at 7:15 PM, Owen Densmore wrote:

OK, Twitter now has 2-factor auth.  But does it matter?  I use 2-factor with Google 'cause I store data on their system, make docs, have my email, and so on.  But Twitter, really?  Do I care?

https://blog.twitter.com/2013/getting-started-login

-verification

Anyone on top of this, especially for motivation?

   -- Owen

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

[Owen Densmore]

They've made a new way to receive your pin for android and ios:

    https://support.twitter.com/articles/20170388-using-login-verification

Basically the twitter app notifications will deliver the pin.

If this unified the various 2-factor schemes (google, twitter, my bank, and so on), it would certainly simplify using 2-factor over many services.

   -- Owen

On Fri, Aug 9, 2013 at 3:39 PM, Owen Densmore <[hidden email]> wrote:

Way cool!  

I'm finding that my "information ratio" is around 6:1 measured by twitter:search saves to pinboard (a Delicious-like personal URL saving site).  By that I mean that I store 6 URLs from twitter conversations (& transitive closure) for every 1 Google search I want to save.

I read an article recently that many demographics have the same phenomenon .. basically social media (twitter, FB, G+) are their primary source of information, and the web search is low on their list.

Partly I think that is because the web is so huge that phrasing a search request well is tough.

Anyway, interesting that Twitter just might have a reason for 2-factor auth.  Google does a good job, with a small app too rather than only sms for the pin.

   -- Owen 

On Fri, Aug 9, 2013 at 10:54 AM, Parks, Raymond <[hidden email]> wrote:

In an amazing coincidence, we were just talking about why Twitter would matter in a different context.

You may have seen the WSJ origin of this -

http://hotair.com/archives/2013/08/06/traders-sneaking-peeks-at-government-economic-reports/

There was a mention of Sandia's work for Bureau of Labor a while back in the press - we reluctantly red-teamed their pressroom security.  We told them that this was possible and even likely.

So the last couple of days, we've been passing this article around in email and making cracks about it.  One of our original recommendations was to move from the 1960 pressroom model to a 21st Century Internet model.  In the email chain, one of us joked that they'd be better off just using Twitter - to which I replied that their adversary model would then be Guccifer and Syrian Electronic Army.

Just imagine if the Friday morning government economic news came out via Twitter - authentication on Twitter really would matter.

Ray Parks

Consilient Heuristician/IDART Program Manager

V: <a href="tel:[phone]" value="[phone]" target="_blank">505-844-4024  M: <a href="tel:[phone]" value="[phone]" target="_blank">505-238-9359  P: <a href="tel:[phone]" value="[phone]" target="_blank">505-951-6084

NIPR: [hidden email]

SIPR: [hidden email] (send NIPR reminder)

JWICS: [hidden email] (send NIPR reminder)

On Aug 7, 2013, at 7:15 PM, Owen Densmore wrote:

OK, Twitter now has 2-factor auth.  But does it matter?  I use 2-factor with Google 'cause I store data on their system, make docs, have my email, and so on.  But Twitter, really?  Do I care?

https://blog.twitter.com/2013/getting-started-login

-verification

Anyone on top of this, especially for motivation?

   -- Owen

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com