+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Gauth Purge (/showthread.php?tid=5578405)
Gauth Purge - Omniscient - Mar 18, 2017
I think I'm going to purge all Gauth codes. It's just too many accounts lost at this point and it's very frustrating. It's thousands of accounts of members who seemingly don't understand they can backup their secret key or they can use Authy and enable backups. I keep making adjustments but they don't work if someone did their Gauth setup a year ago.
I closed thousands of inactive accounts and before I do that again I want to make sure members have a chance to login and properly set and backup their Gauth secret keys.
I'm going to do this today.
1. Review Gauth procedures and make template changes for better education.
2. Reset/Delete all current Gauth codes.
3. Email all upgraded members who have access to the Gauth feature that they can access their account and are able to backup their key.
4. Enact a policy that no accounts will be recovered anymore.
Anyone have any thoughts on this as I proceed?
* - NurSpec - Mar 18, 2017
Personally I feel as though it's their own fault. Members don't value their accounts until they've lost them it seems.
* - Riggs - Mar 18, 2017
Same suggestion I made before. Maybe consider offering a pay-to-reinstate service? If someone loses their Gauth and you're satisfied they're the account owner, offer a fixed $50 fee for you to reinstate their account.
For a lot of negligent members it's worth the $50 rather than losing their account. Thoughts?
* - occupi - Mar 18, 2017
I deal with 2FA issues every day (people not understanding how important it is to backup your recovery keys, don't wipe your device without thinking about 2FA, etc) and honestly... everyone seems to be terrible with it. :(
* - Elitas - Mar 18, 2017
(Mar 18, 2017 11:29 AM)Riggs Wrote: Same suggestion I made before. Maybe consider offering a pay-to-reinstate service? If someone loses their Gauth and you're satisfied they're the account owner, offer a fixed $50 fee for you to reinstate their account.
For a lot of negligent members it's worth the $50 rather than losing their account. Thoughts?
I think $20 is a fair fee to reinstate an account, but the account must not be logged in for a certain period for this to happen (to keep user's safe).
* - Mαxim - Mar 18, 2017
Sounds like a smart plan, hopefully it turns out well.
* - Omniscient - Mar 18, 2017
Quote:Same suggestion I made before. Maybe consider offering a pay-to-reinstate service? If someone loses their Gauth and you're satisfied they're the account owner, offer a fixed $50 fee for you to reinstate their account.
For a lot of negligent members it's worth the $50 rather than losing their account. Thoughts?
I really don't want to do that. I suppose I can consider it. Probably better than telling people there is no recovery at all. I may tier the cost based on their account upgrade. I'll have to think about it.
I'm already writing up the email blast I plan to send today.
* - Donald Trump Jr. - Mar 18, 2017
(Mar 18, 2017 11:29 AM)Riggs Wrote: Same suggestion I made before. Maybe consider offering a pay-to-reinstate service? If someone loses their Gauth and you're satisfied they're the account owner, offer a fixed $50 fee for you to reinstate their account.
For a lot of negligent members it's worth the $50 rather than losing their account. Thoughts?
This is a really good idea, I know I'd personally pay $100s to recover my hf account.
* - ShennagigansDN - Mar 18, 2017
Is this going to affect how we use the GAUTH? I just disabled mine for the time being until this is all sorted out. I don't wan't to get locked out because something goes bad with this...
* - 2073436 - Mar 18, 2017
Sounds like a really good idea. Good luck.
* - Mi2414 - Mar 18, 2017
Just made sure mine was backed-up, Thanks for letting me know about this.
* - Mαxim - Mar 18, 2017
Would be cool if you would be able to boycott Gauth and just allow Authy, considering:
Quote:or they can use Authy and enable backups.
* - Phire - Mar 18, 2017
(Mar 18, 2017 11:39 AM)Omniscient Wrote: I really don't want to do that. I suppose I can consider it. Probably better than telling people there is no recovery at all. I may tier the cost based on their account upgrade. I'll have to think about it.
I'm already writing up the email blast I plan to send today.
I really like this idea. If someone chooses not to value their account then a fee would be a good way to make them value it - plus some more income. Might be quite a labourious task however.
* - Omniscient - Mar 18, 2017
Quote:Is this going to affect how we use the GAUTH? I just disabled mine for the time being until this is all sorted out. I don't wan't to get locked out because something goes bad with this...
It will be fine. I think I know how to make adjustments to my own plugins. All Trust Scan pages will of course will show a new Gauth.
Quote:Would be cool if you would be able to boycott Gauth and just allow Authy, considering:
The Gauth page gives Authy as the recommended application. Realistically if you view the Gauth page I think it's clear as it is. Everyone may as well disable it for now because in fact I'm going to do it today anyways.
https://hackforums.net/gauth.php
Any comments about the Gauth page instructions for backup and use of Authy? I think it's pretty clear. I added a clickable link which gives you a popup. Really not sure what else I can change.
* - Tʀᴀᴜᴍᴀ - Mar 18, 2017
(Mar 18, 2017 12:00 PM)Omniscient Wrote: https://hackforums.net/gauth.php
Any comments about the Gauth page instructions for backup and use of Authy? I think it's pretty clear. I added a clickable link which gives you a popup. Really not sure what else I can change.
Nope, it's just like the trust scan feature.
People don't care until something happens to them. If they want to learn they hard way, they can.
Everything on there is clear to understand.