2FA, or two-factor authentication - Number is stored!!!

[Molecule88]

Hi,

i have tried to register one more account for my partner using my mobile number but encountered this below: (1st & 2nd account registered long time ago, have already lost the email), this is my third account.

When I try to register for my partner, it prompt this.

"You can only reuse a number up to 3 times for 2FA authentication"

HWZ mentioned our mobile number will not be stored but in fact it is stored. Trying to bluff us???? What your take?

2FA, or two-factor authentication requires you to verify your registration with us using your mobile phone. We will drop you a code for you to complete your registration.

This feature is implemented to improve the security of your HardwareZone account. Your mobile number will not be stored with us and is used solely for registration authentication.

If you encounter any difficulties in the course of your registration, you can email us at: membership@hardwarezone.com.sg

 

[lilith]

Lies obviously, anything happen can BK to mata then track hp number

 

[Molecule88]

meaning they can track at all.

 

[Zangief]

I have created a thread on this sometime ago too, glad u realised it.

nick tied to number, big brother is watching.

 

[Molecule88]

Lies obviously, anything happen can BK to mata then track hp number

such a big forum also lieing????

 

[britneyspears]

knn ur english like sai

 

[Molecule88]

I have created a thread on this sometime ago too, glad u realised it.

nick tied to number, big brother is watching.

so must be careful lor...

 

[Molecule88]

not trustworthy at all. ultimaytely, HWZ owned by SPH, SPH owned by TH, TH ownd by...

 

[RyuShinEX]

Since when ah gong won't spy

 

[lilith]

such a big forum also lieing????

Big companies like BP do it. Why should smaller companies be any diff if they can get away with it? You ever heard of an individual sue company here and successful? Yet there are thousands of complaints to CASE.

Privacy laws here are non-existent, unless u are a certain group of people.

 

[Molecule88]

I have created a thread on this sometime ago too, glad u realised it.

nick tied to number, big brother is watching.

Where your thread? Cant find.

 

[Meireles]

VIJAY NEEDS TO COME CLEAN WITH THE FORUMMERS

 

[Molecule88]

Big companies like BP do it. Why should smaller companies be any diff if they can get away with it? You ever heard of an individual sue company here and successful? Yet there are thousands of complaints to CASE.

Privacy laws here are non-existent, unless u are a certain group of people.

You mean got individual sue company here and successful??

 

[lilith]

You mean got individual sue company here and successful??

Obviously not right?

CASE is "mediation", mediate my **, unless company openly break safety laws or lots of people die, don't expect anything.

 

[Molecule88]

Since when ah gong won't spy

Like that better switch other forum...haha

 

[kingtrade]

Hi,

i have tried to register one more account for my partner using my mobile number but encountered this below: (1st & 2nd account registered long time ago, have already lost the email), this is my third account.

When I try to register for my partner, it prompt this.

"You can only reuse a number up to 3 times for 2FA authentication"

HWZ mentioned our mobile number will not be stored but in fact it is stored. Trying to bluff us???? What your take?

I think they are trying to play with words.

They might not really store the mobile number in their database but they have outsourced their 2FA authentication service to a vendor (I doubt SPH have an inhouse team to run such service), who likely store the number in their database.

 

[Molecule88]

I think they are trying to play with words.

They might not really store the mobile number in their database but they have outsourced their 2FA authentication service to a vendor (I doubt SPH have an inhouse team to run such service), who likely store the number in their database.

I doubt so. Taken a quick glance at the source code. I think the number is stored in-house.

var req = new Request({
url: '/register.php',
onSuccess: function(responseText) {
// OK: a new 2fa code, OK_PREVIOUSLY: received 2fa code previously, same client, hasn't verified
if(responseText == 'OK' || responseText == 'OK_PREVIOUSLY') {
// show resend button, next step portion and step notice, hide request button and "Requesting..." message
$('resendBtn').style.display = 'inline';
$('requestBtn').setStyle('display', 'none');
$('hwz_2fa_step2').setStyle('display', 'block');

$('validateBtnWrapper').grab('hwz_2fa_step-notice', 'top');

 

[Molecule88]

VIJAY NEEDS TO COME CLEAN WITH THE FORUMMERS

Who is vijay??

 

[alchemist_acid]

last time register hwz need hamfone lumber?

 

[kingtrade]

I doubt so. Taken a quick glance at the source code. I think the number is stored in-house.

This piece of code only shows a typical pass by value function. No one, including you and me, can make an educated guess beyond that the number is passed to a function to perform a check and then return and display the result of the check on the browser.

Unless somehow someone leak some more info, it is quite impossible to tell what and where is the so-called verification system by just looking at this snippet of code .