Check out our brand new Local Poker Communities! Get updates and interact with poker players in your area.
Visit the United States Poker Community | Visit the California Poker Community | Read more about the Launch of P5s Local

Online Poker Account Security Idea

Reply to Thread
  1. Rocket Surgeon Rocket Surgeon is offline & brain scientist

    United States

    Posts: 12,012
    Joined: Apr 05

    Dec 19th, 2007 (12/19/2007 5:20pm)

    I got an idea today that could really increase the security of online poker accounts (btw, if this was discussed before please tell me to GTFO). My idea is this: allow people to opt into a program that requires you to sign into your account with your normal password <span>and</span> a randomly generated 6-digit number.



    I thought of this when I was entering grades today into penn state's online system. They issued a key similar to that ^^^^ to professors and teaching assistants, and required us to use the randomly generated number as well as our password to sign in.

    So how does it work? Well, the 6 digit number <span>changes</span> around every 5 minutes. It's a completely stand alone unit too (a little smaller than the size of a USB memory stick), and you do not connect it to a computer or anything. The system that you are logging into knows what your 6-digit number should be AT THAT TIME, and you are required to enter that number along with your password.

    This would completely eliminate all of these high-profile "hacking" stories that we keep hearing. By allowing people to opt into this system (notice I say opt-in, I don't want to scare fish away by having them deal with such a 'complicated' thing), there would be no way for someone to get into your account. They would have to physically steal your key generator thing, along with somehow find out your password.... and well if that happens then you prob suck at life and deserve to get hacked. I keeeed, I keeeeed.

    E-trade actually just started allowing customers to opt into a similar program because of security issues with high-dollar accounts. This could give high stakes, or even nervous mid-stakes online players peace of mind to know that their money is safe.

    What do you all think? Yay? Nay? GTFO?
  2. DexterCain DexterCain is offline

    Posts: 13,456
    Joined: Aug 05

    Dec 19th, 2007 (12/19/2007 5:23pm) in reply to Rocket Surgeon

    this is actually a much better idea than most of them have been
  3. namniewd namniewd is offline

    Atlanta, GA
    United States

    Posts: 3,799
    Joined: Mar 06

    Dec 19th, 2007 (12/19/2007 5:23pm) in reply to Rocket Surgeon

    you very smart... but we already knew that...

    Cool idea though
  4. cmval cmval is offline

    Posts: 11,428
    Joined: Sep 06

    Dec 19th, 2007 (12/19/2007 5:29pm) in reply to Rocket Surgeon

    great idea...best one ive seen yet actually

    and yeah brianyut is the most intelligent dude that posts here
  5. Adam Adam is online now Emperor

    Atlanta, GA
    United States

    Posts: 12,630
    Joined: Dec 04

    Dec 19th, 2007 (12/19/2007 5:33pm) in reply to Rocket Surgeon

    I this idea
     
  6. showtime90 showtime90 is offline

    United States

    Posts: 9,061
    Joined: Jul 06

    Dec 19th, 2007 (12/19/2007 5:45pm) in reply to Adam

    niceeee
  7. Athanasey Athanasey is offline

    Brisbane
    Australia

    Posts: 31
    Joined: Sep 07

    Dec 19th, 2007 (12/19/2007 5:49pm) in reply to Rocket Surgeon

    Hi There,

    I have one of those tokens that looks exactly like that. I use to process direct debits (electronic check drafts) online. It is kind of annoying having to find it and re-enter a new number every 5 minutes, but I think that is specific to the software I use and not the token.

    One thing I have tested with it though is writing down lists of the numbers it generates and using them later in the day. it has always let me through, so I am not convinced they are time specific.

    All in all though the OP is right in saying that it is extremely secure as someone would have to physically steal the token, or you'd have to be stupid enough to write down a list of numbers! :o)

    I'd feel safer toting my laptop around the country if I knew my incredibly massive (jk) bankroll wasn't at risk.
  8. Rocket Surgeon Rocket Surgeon is offline & brain scientist

    United States

    Posts: 12,012
    Joined: Apr 05

    Dec 19th, 2007 (12/19/2007 5:57pm) in reply to Athanasey

    Hey Athanasey, thanks for the feedback.

    I had a different experience with them though. Mine did not have me re-enter the number every 5 minutes, it simply changed every 5 minutes and I had to enter the correct sequence at the time I was logging in.

    I was actually curious to see if it would allow me to log in with past keys, and it would not. It seemed to work only with the sequence that was displayed during the time I was attempting to log in.

    I'm sure this all depends on what you are logging into, of course. Your system was probably very different from mine. The poker sites could tweek it to whatever works best for them.

    BTW, thanks for the compliments namniewd and cmval :)
    Thread Starter
  9. DoubleS00ted DoubleS00ted is offline

    PR
    United States

    Posts: 2,050
    Joined: Oct 06

    Dec 19th, 2007 (12/19/2007 5:59pm) in reply to Rocket Surgeon

    a really goot idea.
  10. time4badbeat time4badbeat is offline

    WI
    United States

    Posts: 4,550
    Joined: Nov 06

    Dec 19th, 2007 (12/19/2007 10:13pm) in reply to Rocket Surgeon

    Also agree its a good idea.

    Even if you only have a few grand online - some people are skittish about it.

    Some nights I def. do worry about account being hacked.
     
  11. caveman caveman is offline

    Melbourne
    Australia

    Posts: 39
    Joined: Mar 07

    Dec 19th, 2007 (12/19/2007 11:06pm) in reply to Rocket Surgeon

    I was just thinking about this exact same idea last night. My mum had one of these things for her banking at ATMs when she lived in Hong Kong. I just joined up to a poker site called Simba Poker a couple of days ago and they have something kind of vaguely similar - they will send you out a scratch off card (free of charge) with something like 50 codes on it and you need to type in the next code on the scratch off card each time you log in. Too bad there is only ever about 30 people logged into the site!
  12. Call Me Jigsaw Call Me Jigsaw is offline

    Apo, AE
    United States

    Posts: 711
    Joined: Oct 07

    Dec 19th, 2007 (12/19/2007 11:17pm) in reply to Rocket Surgeon

    Yes, it will protect against being HACKED (but not multi-accounting)

    They used to use those for AOL back in the day when people were stealing "Empowered" accounts (Hosts, OH's, etc) - you could basically scroll/spam/do anything u wanted with these accounts. These accounts were almost "mythical", and having a screen name so powerful caused all of the underground AOL "Hackers" to also seek this power. Some kids got the bright idea to make password crackers that would run all day and night trying to crack the passwords to these empowered accounts (with great success), so AOL started using the method you're describing above to protect these accounts because kids would always program password crackers to try and hack these accounts. It worked - there's no way around it, and the kids stopped trying.

    Wanna know how I know? Because I was one of those kids. And here we are 10 years later, talking about the same technology :)

    HOWEVER, it would not stop multi-accounting, or someone telling someone over the phone what the 6 digit # is.
  13. Rocket Surgeon Rocket Surgeon is offline & brain scientist

    United States

    Posts: 12,012
    Joined: Apr 05

    Dec 19th, 2007 (12/19/2007 11:34pm) in reply to Call Me Jigsaw

    That's pretty interesting, but keep in mind I never insinuated that this would stop multi-accounting. I'm not sure where that idea even came from? I was strictly talking about people falling prey to 'social engineering' scams and losing the money in their accounts.
    Thread Starter
  14. Call Me Jigsaw Call Me Jigsaw is offline

    Apo, AE
    United States

    Posts: 711
    Joined: Oct 07

    Dec 19th, 2007 (12/19/2007 11:35pm) in reply to Rocket Surgeon

    If that's the case, you've got yourself a winner. :)
  15. UnDReSTiM8D UnDReSTiM8D is offline

    Pine Grove, CA
    United States

    Posts: 68
    Joined: Aug 07

    Dec 19th, 2007 (12/19/2007 11:42pm) in reply to Call Me Jigsaw

    timely Christmas gift idea

    Pocket Fives 'SecureID' keychains
  16. Rocket Surgeon Rocket Surgeon is offline & brain scientist

    United States

    Posts: 12,012
    Joined: Apr 05

    Dec 19th, 2007 (12/19/2007 11:52pm) in reply to UnDReSTiM8D

    ^^^ OMG what a good idea.

    Get jesterwords on this right away.
    Thread Starter
  17. grapsfan grapsfan is offline Head Curmudgeon

    Rosemount, MN
    United States

    Posts: 7,980
    Joined: Jun 05

    Dec 20th, 2007 (12/20/2007 12:03am) in reply to Rocket Surgeon

    I've used SecurID systems for years (never administrated, only as a user) and I think they're great. There are a some issues that would need to be recognized and addressed by the sites first:

    1) They would have to buy a separate SecurID server system that keeps track of the token generators. For something on as massive of a scale as the total # of users on stars or FTP or party, this would be a VERY high-power box, taking a lot of maintenance.

    2) Turning up a SecurID token takes time...more manual labor to get codes and tokens programmed in.

    3) The tokens don't last forever...the one I have now expires in two years from the assignment date. Tracking and getting users updated tokens would take more maintenance and planning.

    So, I think it's a brilliant idea for the sites to use them. It's also a substantial cost they'd be taking on...and you know how thrilled businesses are about volunteering to do anything that costs them money.
     
  18. Camz Camz is offline

    Lafayette, LA
    United States

    Posts: 12,419
    Joined: May 06

    Dec 20th, 2007 (12/20/2007 12:14am) in reply to Rocket Surgeon

    loooooool, I have one exactly like this.(I'm working for ConocoPhillips) and that's what we use to get into their networks. I thought about this for pokerstars the other day actually; it'd be a great idea.
  19. Rocket Surgeon Rocket Surgeon is offline & brain scientist

    United States

    Posts: 12,012
    Joined: Apr 05

    Dec 20th, 2007 (12/20/2007 12:15am) in reply to grapsfan

    That's some great input grapsfan.

    What do you think about offering this service to a limited amount of players (depending on account activity/size) to cut down on overhead costs? I believe that's what E-trade did, as they limited it to only those people who have over something like 100k in their account and X number of transactions per month.
    Thread Starter
  20. grapsfan grapsfan is offline Head Curmudgeon

    Rosemount, MN
    United States

    Posts: 7,980
    Joined: Jun 05

    Dec 20th, 2007 (12/20/2007 12:28am) in reply to Rocket Surgeon

    Starting with "VIP Account" members or something to that affect would certainly be a good start. For example, stars could offer it as a free service to anyone with over $25k in their account or a Supernova status.

    The other option is to offer it as a for-pay feature of the site. I'm pretty comfortable with the security I have in place in terms of rotating passwords, not IM'ing a lot (and never with strangers), etc. But I'll bet there's a good number of people that'd pay $99/year for this extra security (and trust me, it's HUGELY secure).
     
  21. Mr Galt Mr Galt is offline sister-in-law's a ho

    Overland Park, KS
    United States

    Posts: 9,097
    Joined: Nov 07

    Dec 20th, 2007 (12/20/2007 9:26am) in reply to Camz

    Wachovia securities uses these devices as well to regulate access to its online broker-dealer interface. Works like a charm. --J
  22. DrinkingProblem DrinkingProblem is offline

    Little Falls, NJ
    United States

    Posts: 1,058
    Joined: Oct 06

    Dec 20th, 2007 (12/20/2007 11:11am) in reply to grapsfan

    Great idea. I definitely think this would be a popular feature if any site offered it.
Reply to Thread

Similar Threads