CCP Ghostrider

Senior software engineer working for CCP Games. Single Sign On and Two-Factor Authentication questions? Fire them my way!

[CCP Ghostrider @CCP_Ghostrider]

@HansGeussens @RussUnderhill @MrDjenty @Office365Status No dice for me. Azure AD can't find our tenant so nothing works.

[CCP Ghostrider @CCP_Ghostrider]

@dirkmacgirk I could tell you, but then I'd have to pod you!

[CCP Ghostrider @CCP_Ghostrider]

Also, see if I can coerce our ops guys to finish setting up the big screen on our team wall for our service dashboard.

[CCP Ghostrider @CCP_Ghostrider]

also, setting up a few CI/CD pipelines for some internal NuGet packages and probably some perf analysis on existing code. #funtimes #gamedev

[CCP Ghostrider @CCP_Ghostrider]

So, project of the day... find solution to Redis memory fragmentation on slaves, cleaning up base libraries (prep for .NET Core migration)..

[CCP Ghostrider @CCP_Ghostrider]

@robertschuh @CCP_Avalon Shit, have totally neglected my Twitter duties, mostly using my @stebets handle there. What's the path for Tweetfleet slack?

[CCP Ghostrider @CCP_Ghostrider]

@eXeler0n @stebets U2F is an option also, but I'm more looking forward to all browsers implementing proper FIDO 2.0.

[CCP Ghostrider @CCP_Ghostrider]

@SAS_Sweetnjuicy We still want more optional security features that users can configure themselves though. Security is a good thing :)

[CCP Ghostrider @CCP_Ghostrider]

@SAS_Sweetnjuicy The character challenge is gone as of the Ascension release. The SSO is now more forgiving towards IP address changes.

[CCP Ghostrider @CCP_Ghostrider]

@RoAnnon Because IT security is a constant arms race against the "baddies". Losing an account, be it EVE/FB/whatever, is always bad :(

[CCP Ghostrider @CCP_Ghostrider]

@Phoenix5153 Microsoft's authenticator app uses both Azure Push based auth as well as TOTP (Google Authenticator compatible).

[CCP Ghostrider @CCP_Ghostrider]

@Phoenix5153 That'd limit the 2FA authenticator to just EVE, unlike the TOTP app which is usable for accounts like FB, Google and Microsoft.

[CCP Ghostrider @CCP_Ghostrider]

@mandrill Well, TOTP authenticators are most often usable for more than just EVE, for example Facebook, Google and Microsoft accounts also.

[CCP Ghostrider @CCP_Ghostrider]

@rellecon Technically yes, but only on Windows 10/Microsoft Edge since other web browsers do not support biometrics/Windows Hello.

[CCP Ghostrider @CCP_Ghostrider]

@Orions_Lord you would be able to whitelist those two countries for example. Login attempts from other countries would automatically fail.

[CCP Ghostrider @CCP_Ghostrider]

Hey #tweetfleet! What optional security/login features would interest you? No promises, just me gauging interest/considering/prioritizing.

[CCP Ghostrider @CCP_Ghostrider]

@spcoath @ccpseagull @EveOnline Sent me a DM with the username involved and I'll take a look on our side.

[CCP Ghostrider @CCP_Ghostrider]

@zerfall @CCP_Explorer Validating email addresses is an even more important factor when that comes into play.

[CCP Ghostrider @CCP_Ghostrider]

@zerfall @CCP_Explorer Yes! Although we can't commit to a timeline yet.

[CCP Ghostrider @CCP_Ghostrider]

@zerfall @CCP_Explorer Therefore we recommend enabling the authenticator. Emails, although unreliable are important at the start though.