[Antigen]

Hi,

Lately I've been witnessing lot of account hijacking/hacking in here, I would like to propose an idea which can essentially make hacking accounts very difficult.

HF is already logging in our last accessed IP, so when a member log in to HF then system should check whether he's logging from same place as before, if so let him be else lock his account and send a confirmation mail and ask him to confirm his new location and unlock account.

Since HF wouldn't allow proxy/vpn then in no way a potential hacker could access someone's account from another place. I'm quite sure this will be extremely benefit to increase security in overall. If you are worrying about the ip location accuracy then don't worry, 99% times we can map ip to real location(Country).

I don't find any downside for this feature except in case of a member use VPN, or one who travels in and out country very often, to resolve this issue we can make this "Region Lockout" feature optional or can be set to "off" in settings. But this option should be "on" by default and if a member doesn't need it may turn it off.

I understand OMNI is planning to implement 2FA, I agree that it's a good security system but I won't use because the hassles associated with it ! I can't keep my phone every single time I login or where I went to, it just irritates me to do that, while proposed idea could add a great amount of protection without any hassles. I also understand about implementation and financial factors but I can assure you that this system could be implemented easily and without having a huge cost and cost is one time only. Even if 2FA comes online there will be a number of users who won't use it at all because of the hassles associated with it so it could be useful for us and for overall security.

Proposed system is implemented on many websites as you might know, eg. 90% Social media sites, coinbase(they have a IP lock system) etc.

If you think this will benefactor account security please say so.

Sounds like something like Steam-Guard, but for HF. That'd actually be a nice addition, great idea, I support this. :)

This. This is genius. I really like the idea of getting this added. Safe and more secured.

Seems like a pretty cool idea, but I'm quite the traveler so as long as there are some settings to be tweaked to allow me to still login when traveling,, it's great.

This sounds like a very good idea. I think this would solve pretty much everything with account security. Very good idea. I hope this gets implemented.

If this feature had a toggle it would be nice to have but otherwise I think it would cause issues, as stated in the commends.
But yes, this would be a nice feature. Although, 2-Step Authentication would be even better.

Well, seems like another popular member just got hacked ! (CyberneticTitan)

Thank you,
Good day.

[Programming]

This is good, but everyone would like this security.

I use LTE at school, go to my dads house in a different city, and go out of state often. I'd love the extra security but it'd fuck me over.

[Antigen]

This is good, but everyone would like this security.

I use LTE at school, go to my dads house in a different city, and go out of state often. I'd love the extra security but it'd fuck me over.

As I said in OP this won't be a problem for you because your account will be only locked out if you move out of your Country not your city or state, so you'll be fine.

Even if you are a frequent flyer you can optionally turn off this in settings so you should be fine.

[Aura]

Omni is already working on Google Auth. and a new factor of 2FA so it's already in progress.

[~HF~]

2 factor log in is all we need to have our accounts pretty much fully secured.

[Antigen]

Omni is already working on Google Auth. and a new factor of 2FA so it's already in progress.

2FA does have it's limitations like you'll need your phone every single time when you access HF else you'll need a extra long boring pincode which no one can by heart. I find it quite time consuming to hop on to mobile every single time I'd like to login to HF.

Where as what I proposed is a simple system and requires zero effort from user's part, also I guess it's not a tedious part to code a mechanism for this in HF.

[Canon]

As long as the feature can be turned off, it's cool with me. I study in the USA, but I go home for summers and winters. It'd suck not to be able to use HF in that time.

[Antigen]

As long as the feature can be turned off, it's cool with me. I study in the USA, but I go home for summers and winters. It'd suck not to be able to use HF in that time.

Even if you get locked out you just need to confirm your new location from your mail, that's it takes.

[Cyber Saint]

Seems like a pretty cool idea, but I'm quite the traveler so as long as there are some settings to be tweaked to allow me to still login when traveling,, it's great.

[webdev77]

By country even has it's limitations since the US is such a large country land wise. In the past week and a half I've traveled nearly 4000 miles and still have not had to log back in to HF. That said, that's quite a large area somebody could be from and still access an account. 2FA is a good solution imo and shouldn't be a huge deal for the added security benefit of it.

[Programming]

As I said in OP this won't be a problem for you because your account will be only locked out if you move out of your Country not your city or state, so you'll be fine.

Even if you are a frequent flyer you can optionally turn off this in settings so you should be fine.

What if my 'hacker' lives in the US?

[Jemjem787]

I am with Canon, as long as this is an optional feature then i think it will be a great idea.

But if the person hijacks your HF account then what says that they can't get into your email also with the same method?

[~HF~]

Even if you get locked out you just need to confirm your new location from your mail, that's it takes.

Quite often if someone keylogged you or whatever and got your HF account they would have your email as well anyway haha :p

2FA is the only thing I think Omni will implement and is the only thing needed.

[Antigen]

What if my 'hacker' lives in the US?

Obvious, I never said my method is foolproof, but I can say it'll be a good addon feature to enhance security. Proposed idea actually improves security without any hassles and no, it's not 100% security, nothing really is.

[Factor8™]

This will not be implemented by Omni. I can confidently say this because the logistics/cost involved far exceed the benefits.

Hi,

Lately I've been witnessing lot of account hijacking/hacking in here, I would like to propose an idea which can essentially make hacking accounts very difficult.

It's not really hard to secure your PC/AC is it? Just good old common sense protects but anyways....