account hacking

It's easy enough ribero and I'm sure you will have no problems.

ericster • December 22, 2020 2:37 PM GMT
dave, I don't have a phone I'm on a desk-top.

I know eric, you already said, but given your continued interest, I obviously wrongly assumed that you wanted more info.

Thanks sparrow,i presume they send an authorisation code to your phone everytime you log in?

no it doesn't get "sent" - it works on its own, see the above posts.

No no dave, sorry, some people just can't be helped. I'm interested because it may very happen to me. It's just one more thing to worry about I suppose.
Maybe I'm hoping that with all these comments BF might invest in making the site secure, is that actually possible nowadays?
Like I said, once it's gone, it's gone.
I shall miss it but I shall accept it.

I take it if you then have the mobile phone signal completely down ( phone & internet ) you can't get into Betfair on your computer ?

ffs

you dont need a signal or internet tuse it

plus, if your internet was down you wouldnt get onto betfair anyway surely

Howard are you fishing - you've already been told how it works by three people

now ive missed the 2.45

Howard

, if your internet was down you wouldnt get onto betfair anyway surely

ribero, as Dave has said it's already there waiting for you.

wont work on iphone 5, it says I need to update to IOS blah blah blah, so not staight forward to download 2step.

if uther pendragon had won that I would've been sick for a week

ericster
22 Dec 20 15:31
Joined: 10 Mar 02 | Topic/replies: 3,119 | Blogger: ericster's blog

Dec 22, 2020 -- 3:30PM, dave1357 wrote:

howard the authenticator is synced with your account the moment you enter the code provided by betfair - it is like identical twins giving the same new code every thirty seconds - one with betfair and one on your phone.

Can't even make sense of that, I'm not joking, sorry.

most 5 year olds get this eric

REDROB
Date Joined: 13 Jun 06
Add contact | Send message
22 Dec 20 15:50
Joined: 13 Jun 06 | Topic/replies: 3,395 | Blogger: REDROB's blog
wont work on iphone 5, it says I need to update to IOS blah blah blah, so not staight forward to download 2step.

planned obsolescence. steve jobs trillion dollar idea.

yes there are phone problems, but anyone can get a cheap phone on payg if necessary. You can even just use the phone for 2FA and never give out the number other than for that purpose - that would be even more security.

oh right thanks james, I know my crappy phone, about 3 years old, is supposed to be "smart" but didn't have the app already installed even though it had google play on it.

I believe you can use Google Authenticor on your desktop if you also use the Chrome Browser

ease, you have to go to the google play store and search for authenticator

Thanks everybody,might make christmas day a little bit more interesting although think my phone is iphone 5.

The thing is, don''t try and understand 2-step authentication. It's irrelevant how it works. Just do it.

How do I turn it on?
To turn on the two-step authentication feature simply login to your Betfair account and visit ‘My Account’. Under ‘My Security’ tab you will find the setup screen. Just follow the instructions to sign up and configure your options. It only takes a couple of minutes.

How do I use it?
Two-step authentication is very easy to use and you will quickly get accustomed to the process. You start by logging in as usual. You will be presented with an additional login screen if your credentials are correct. Open the Google Authenticator from your phone and type the verification code in your browser. If the code is correct, you will be logged into your profile. You can choose to do this for every login or only for new devices within 'My Security'.

dave, dusty et al

can eric still use 2fa without authenticator? i.e. the backup codes?

It worked off my old iPhone 5s, ribero1. I think that's the minimum standard.

don't know what you mean

to charlton

in the 2fa section there is a subsection called "backup"


to be used when your phone is not available etc


but i guess the hardest part is scanning the barcode...wonder how these guys manage at tesco self checkout.

CHARLTON, AND OTHERS,

sorry I reacted to the thread-header, who wouldn't.
ITC is just too much for me.
You wouldn't believe some of the things the last computer-doc put right for me and yes, some of those things a five year probably could have dealt with.

Thanks Screaming,so you need your phone when you log in?

TESCO-CHECKOUT? Or any other checkout, forget it, it isn't gonna happen.

The older forumites will know I'm not a wind-up merchant, I really am that thick.

I'm just a fly on the wall here, ignore.

Thinking about it,my main account is in wifes name and BF have her phone details so would i need to use her phone?

ok, got the authenticator down loaded, now it says "set up first account" gives me 2 options: scan a QR code or enter Key. no idea what to do now, dont have QR code or key. help please.

I cant remember charlton its been years since I went through the process of setting it up
I recall you do get given a security back up number but suspect its at the point after authenticator is downloaded and synced with the account

eric if you are that thick then all this is pointless as the new deposit restrictions will likely do for you anyway

Don't know about deposit restrictions but if I'm shut out, well, I'm shut out I suppose.

If your phone goes out of contract and you don't renew it will this still work ?

Shall just have to be ultra careful and try to hang on to my balance, until it gets hacked of course.

don't see why not, howard, it is just a machine producing codes every thirty seconds.

Done it, more by luck than judgement.

ribero1. Yes you need your phone to log-in. BUT ... when you log-in the first time, there's a box to tick, which says if this (your computer) is a trusted device (i.e. you're confident no one malicious is going to get hold of it), then tick here, and from now on you'll be able to log-in perfectly normally on this computer - no phone, no 2-step authentication. But if anyone else out there tries to access your account from THEIR computer, they'll need to steal your phone to do so.

If/when you clear your cookies/cache/history from your computer, the box gets automatically unticked, so you'll have to do 2-step authentication again the next time you log-in. But that's all.

As regards which phone to use, any will do. Doesn't matter which is registered with Betfair for other purposes. But you have to use that particular phone whenever you log-in in future via 2-step authentication. That's the big security feature. The baddies need to have access to that particular phone (and know the PIN number for opening that phone) to hack you.

Dec 22, 2020 -- 3:12PM, REDROB wrote:

ok, got the authenticator down loaded, now it says "set up first account" gives me 2 options: scan a QR code or enter Key. no idea what to do now, dont have QR code or key. help please.

redrob go to your betfair account under security and it will tell you what to do - you are provided with the code by betfair on your account.

Still can't get my head around why vodaphone mobile signal can be down yet my computer internet from a different provider would also have be down.

cheers dave, I managed it thanks

REDROB • December 22, 2020 3:21 PM GMT
Done it, more by luck than judgement.

Well done, when we do your forum assessment at the year end, I predict glowing reviews.

If you had to describe to someone how to tie their shoelaces, then written down, it would seem very complicated.
2sa is simple to ACTUALLY do.
And it is VERY worthwhile.
The older generation/technophobes on here should persevere with it.

you lot probably probaly learnt all this carp at school, whereas I used a log book, not the sort you get with a car

When I was at school, we used to dream of log books.

I played a lot of internet poker in the noughties and there was loads of security savvy people about on twoplustwo poker site who explained how these things worked.

I'm 59 and never touched a computer before 31 Jan. 2005, REDROB.

I read the instructions several times, and kept putting it off because it looked so complicated. Then, when I tried doing it, like you, I found it impossible NOT to get it done. It's that simple.

So, If I've selected " only when I log on from a new device". Does that mean the only way I can be hacked is if someone gets hold of either my computer or phone ?

Me too screaming, only got compuiter in 2006 to use betfair.

and never had phone till 2002

Yes, REDROB.

And remember, they'll still need to know the password or PIN to open your computer or phone in the first place.

Great, just need to win some dough in my account now to make all that effort worthwhile

and dave when I was at school I never ever dreamt of log books, I think my earlest dreams were of Ursulla Andress coming out the sea in Dr No

dave1357
ease, you have to go to the google play store and search for authenticator

yeah I know dave, I was referring to jamesmead's post(replying to howard) re the app being already pre-installed on some phones. If not it will have to be downloaded from google play, using internet connection.

reg,

I rarely access Betfair by mobile phone. However, I would assume that you could access the main Betfair website on a mobile phone via an internet browser, such as Google Chrome, rather than using the Betfair Mobile App.

strange for 2 days i could not post , now i am not logged in but can post htf?

I've had that here FOYLES.

Dave & Reg

"I would assume that you could access the main Betfair website on a mobile phone via an internet browser, such as Google Chrome"

You can - I have done that to put on Tote and (back in the day) Exchange Multis bets.  Surprisingly usable.

yes eric ,i logged out about an hour ago .then went on one of the threads without logging in the without thinking replied on a thread then realised i was not l signed in but posts still appearing ?

I hardly use my mobile for betfair but when I do I use Firefox with no problems. I stopped using the app after encountering some difficulties.

I never log into the forum Foyles, but my username is always at the top whenever I come here even though I am not logged onto the exchange.

how is that redrob ? excuse my ignorance but just dont get it ! those spaces where username and password are blank on my computer but i can post?

no, not the main username, I mean my forum username.

next to where it says contact requests

My username and password are blank too.but forum username is there.

oh yeah same here next to contact requests?

sorry missed the 21.28 post

how long have you been able to post without logging in rob?

at least a month

wondering if we are vulnerable to hackers its like you are permenantly signed in even when you have logged out !

I wondered that but if main details aren't there I can't see how it's possible.

me neither .

If I was to log into the exchange now, I would automatically be logged in here too, then when I logged out of exchange it would also log me out of forum, but not my forum name, that would still be here.

must be normal and ive just not noticed it before !

yeah maybe

cheers rob good luck

Ditto

Just tried to do 2 step don't normally keep muck in the acc overnight and guess what:




Access to this account is denied - this account has been closed. Please contact us if you have any questions.



But I can still post here ffs Betfair....

wow that's gutting.

Will have to ring them ,they are hopeless sometimes I'm logged out of the Forum at the moment but still posting....


I would be very careful at the moment somethings not right with the site certs imo

That is very odd and unfortunate, 11kv.

Hopefully your account will be up and running again very soon, upon contacting Betfair.

However, I would strongly advise other readers not to be put off from installing 2 Step Security. I installed it years ago without issue and that appears to have been the experience of most other customers that use it.

I think it may have something to do with updating the phone no as it was an old payg no that was on the account I got a code text to me put it in the box and bingo acc closed ffs

11kv i can post but not logged in .

Trying to speak with them thro messenger..

reg,

I believe that 2 Step Security is entirely separate from the pin number you enter to access the Betfair Mobile App.

If you can access the standard Betfair website, as detailed above, and log-in, you should then be able to set-up 2 Step Security as follows:

(1) My Account
(2) My Details
(3) Security Settings
(4) 2 Step Security

Then follow the instructions.

Possibly somebody that regularly uses the Betfair Mobile App would be able to assist you better.

Exactly the same thing happened to my nephew 2 days ago, 11kv.
He updated the phone number in his acc but with a number he had in an old account that was closed when having 2 was no longer allowed
Got onto livechat and they asked for the usual docs and acc was unfrozen in minutes.

11kv
Date Joined: 21 Jan 06
Add contact | Send message
22 Dec 20 23:45
Joined: 21 Jan 06 | Topic/replies: 30,283 | Blogger: 11kv's blog
Trying to speak with them thro messenger..

if you choose "player protection" as the reason for contacting them, they get to you pronto

Speaking to them now they reckon I have self excluded and the acc cannot be re opened

Same going on here Jumpinh- c-m they are trying to activate a very old acc ffs

If you clicked on self-exclude by mistake, that would be very problematic (and perhaps a little careless on your part). I suppose you could contact them and explain the situation but given their obligation to ensure 'responsible gambling', I'm not convinced that there would be a positive outcome for you in the near future.

If you believe that this was instead some sort of error by Betfair, you will need to explain and convince them of that.

Good luck.

I changed the phone number nothing more their trying to sort it out...

Good, hopefully it will be sorted out soon.

@reg

"My betfair login involves inputting a 4 figure number

Don't know how a 2 step authentication works from there"

As I recall (occasional mobile user, when absolutely no alternative).

AZ -> Settings -> Security takes you to a toggle to enable/disable fingerprint/PIN login (I use fingerprint).

If you enable one or the other of those, you don't need 2FA to login on that device.

If you disable PIN/fingerprint login, then it will fall back to username/password login and then - if you have used the Desktop site to set up 2FA on your account - it will ask for the 2FA code.

But there's no point doing that - your phone login is as secure using PIN/fingerprint as using 2FA.  The reason you would want 2FA on your account (but not on the phone, stick with PIN/fingerprint on the phone) is so that someone with access to your username/password (but no access to your phone) cannot use that username/password to log in on desktop and abuse your account.

And I don't know a way of doing the initial 2FA setup that doesn't involve using the desktop website.

Yes. That's the core thing about 2-factor authorization. It's not about protecting the laptop or the phone you're using. It's about stopping hackers getting into your account from THEIR computer.

One other really easy bit of security to set up is - My Account > My Details > Security Settings. On the left-hand side you can see Logout Preferences. "If you're worried about account security, we can log you out automatically if you haven't been using your account for a while." You can set it for various periods between 20 minutes and 8 hours.

Opened again they got it mixed up with an old acc

Great news. I was feeling a bit guilty, having been one of those telling people to do this 2FA thing.

They sorted over the messenger app,went quite smoothly ........