qft

A new code generates every 30 seconds.

Anyone have any thoughts on, if the mobile software works on some HTC smartphones that run Windows Mobile, it should work on any of them right?

Mark

A new code is generated every 30 seconds, so a months worth of codes is about 2.5 mil codes, two months is over 5 mil. Now that I think about it, I'm actually not sure how a poker could send you all this lol, it would require boxes.

Also:

Can I go back to using no additional authentication?

Yes. Customer Service can change your account to no additional authentication so that you will only need your Player ID and Password to log in to your Full Tilt Poker account. To do this, email Authentication-Support@Fulltiltpoker.com with the following information:

* Your Player ID
* The reason that you wish to revert back to no additional authentication
* The answer to the secret question that you chose for your account

Lol, that seems bulletproof......... If they can get your email/security question they don't even have to be able to log in to your account or have the token/code to disable the token. Seems like you should have to log in and do something that way.

Doesn't that make the RSA tokens useless?

Yes. I am a FT reg and have been for a couple years but this is an epic fail so far IMO. I am like the abused girlfriend who just keeps coming back for more.

Isn't even RSA, it is an unnamed company. At least we all know RSA is a very reputable secure widely used company. We don't even know who makes FT's token.

.

wtf? stars obviously don't send you a months worth of 50 codes. I don't have stars but obviously if they send you anything it's a sheet full of one-time-passwords. These have nothing to do with the RSA algorithm.

Anyway, back to FTP. Very odd that you can change back via email. Hopefully they will get rid of this before this system even goes live.

I don't play on stars so I had no idea how that "recovery system" worked, but this makes a lot more sense than them sending you RSA keys.

Yes, hopefully this is just an oversight on their part and will make it so you have to be logged in to make any changes. As it is now if you have a key logger when you activate your token it does no good b/c they will know your security question and email.

FTPdoug going to address this?

If we can somehow link this to a tournament issue he will address it in a snap.

I bet there under your bed

This sounds like a massive fail so far. If they're not genuine RSA and turn out to be made by some knock-off company in China, and you can remove them by e-mailing a secret answer, what's the point?

this is such bull****

@ bolded part: That is what you have to do for stars... what a ****ing surprise stars gets it right, while ftp fails

well knowing how slow FT support is, if the hacker somehow got access to your email account, it would still take him 7-10 days to get a response from support disabling the RSA token. That gives you plenty of time to email FTP from a different account and tell them that your email has been compromised I guess...

FYP.
What is wrong with you? You cried about token not being RSA in last 4 of your posts in this thread while you have no clue what RSA actualy is. RSA is brand, token is manufactured in TW/CHI/KOR like all the others. Its not even technology its just f-kin brand. Have you heard of ANY tonkens/one time password generators that were hacked? No? Because theres reason. No hacker will bother to do that, when theres 342349819347113 accounts that has no one time password generators protection. I have 3 with 3 different bank accounts. None of them are RSA and i dont give ****.
Please hack mine and you can have all my moneys, until then i would say worry more about FTP procedures not about brand of generator, cause this should be least of your concern.

My confirmation email said to allow 6-8 weeks for delivery... is it really gonna take that long?

This plus no backup if lost/broke (such as Stars/RSAs sheet of one time codes) pretty much sums up everything so far. I can just imagine Stars management sitting back laughing at FT right now.

Fair enough. RSA is the only type I have ever heard of and that several places use them for large accounts. If they are all the same then great!

yea who cares what brand it is if it works... but that still doesn't change the fact you can email and get it disabled...

It needs to be so you have to log in with the actual token to change anything.. what is so hard about that???

The thought of waiting weeks to be able to play if I lost my token is preventing me from doing this.

Don't lose your token then

Even if someone has your password sheet they can't get into your account b/c you type a 4 digit pin before the rsa numbers.

But the part about getting it disabled via email - wtf is that about?