Loopy Pro: Create music, your way.

What is Loopy Pro?Loopy Pro is a powerful, flexible, and intuitive live looper, sampler, clip launcher and DAW for iPhone and iPad. At its core, it allows you to record and layer sounds in real-time to create complex musical arrangements. But it doesn’t stop there—Loopy Pro offers advanced tools to customize your workflow, build dynamic performance setups, and create a seamless connection between instruments, effects, and external gear.

Use it for live looping, sequencing, arranging, mixing, and much more. Whether you're a live performer, a producer, or just experimenting with sound, Loopy Pro helps you take control of your creative process.

Download on the App Store

Loopy Pro is your all-in-one musical toolkit. Try it for free today.

Off Topic: Two Factor Authentication?

Looking for people's experience with Apple's Two Factor Authentication...

I've had an Apple account for a while now so I don't have to use it, however old accounts once signed up cannot opt out after two weeks so I'd be stuck with it.

Maybe not a bad thing, except I don't always have a cell phone account, though as I understand it you can also use a home phone/landline.

As I also understand it, it's not particularly intrusive, in terms of having to constantly authenticate. Once you're signed in, that's pretty much it, unless you sign out of a device or change your password for whatever reason.

Any other thoughts on this from anyone? Before I get locked in? Thanks in advance for any wisdom... (bows)

«1

Comments

  • I use a google voice phone number so I can access from anywhere.

  • edited July 2022

    Nothing but problems for me. Hate it. On my work phone and iPad I have to reset it all the time just to access email, it's unavailable to access all the time. Just a nightmare. Although I totally won't discount role role my organisation plays in these dilemmas.

  • No issues for me, it's painless and like you said once you do it once that's the last you need to worry about it. I also usually have access to an iPhone, iPad, and Apple Watch, so there's very few times I wouldn't be able to authenticate if needed. It's a pretty easy and robust way to safeguard your account IMVHO.

  • My experience has actually been completely smooth and unobtrusive as well. It gives me the ability to use universal control which I must admit has been way more handy than I first thought. Being able to work using the iPad and the laptop as a combined device has been a bit of a blessing at times.

  • The user and all related content has been deleted.
  • edited July 2022

    It works great. Use two-factor authentication on everything because it is trivially easy for systems to be hacked today. As someone who was included in a nationwide credit reporting agency hack in the US, I’m glad these systems work. Someone also tried opening a line of credit in my name and thankfully it was caught in time. There are an unknown number of criminals looking to take advantage of others, so every countermeasure is important to prevent those looking for easy targets.

  • The user and all related content has been deleted.
  • edited July 2022
    The user and all related content has been deleted.
  • @tja said:

    @NeuM said:
    It works great. Use two-factor authentication on everything because it is trivially easy for systems to be hacked today. As someone who was included in a nationwide credit reporting agency hack in the US, I’m glad these systems work. Someone also tried opening a line of credit in my name and thankfully it was caught in time. There are an unknown number of criminals looking to take advantage of others, so every countermeasure is important to prevent those looking for easy targets.

    I have surely nothing against 2FA.
    But it needs to be done correctly.

    1. It shall never add a way to access your account and reset the password without first knowing the password! Yes, that means that there is no protection from password loss.
    2. It shall not require specific devices (which may not be available)!
    3. It shall not fall-back to SMS on a phone number!
    4. It shall allow for backup-access codes (very very important)

    Apple does all four points wrong!

    You lost all devices in a fire but what your account back?
    You were in jail or in hospital for a long time?

    You need backup-access codes for all such scenarios and of course access to a password safe!

    Google at least allows for this, but still you could reset the password and gain access without knowing the password, which is equally bad.

    I guess two-factor is the simplest way to address the issue from Apple's position right now and people have to be responsible for the extra burden it places on them in order to have the extra layer of protection. Apple is sort of caught between doing nothing and endangering their users and doing too much, which would lead to no one securing their accounts.

  • The user and all related content has been deleted.
  • Can I ask a stupid question?

    OK.

    Why is 2FA, a "Forgot password" feature, or any of those sorts of things necessary at all?

    If I have a secure (i.e., non-trivial, long enough, non-dictionary) password, and I don't put it on a yellow sticky note on my monitor or anything else stupid, it should be 100% secure no matter what happens.

    This is how the world worked between roughly 1950 and 2010. Why is stuff like 2FA suddenly necessary?

    (You can probably guess my opinion -- I hate this stuff with a passion and I've actually had quite "energetic" chats with Apple representatives, asking them in no vague terms to turn it off).

  • @SevenSystems said:
    Can I ask a stupid question?

    OK.

    Why is 2FA, a "Forgot password" feature, or any of those sorts of things necessary at all?

    If I have a secure (i.e., non-trivial, long enough, non-dictionary) password, and I don't put it on a yellow sticky note on my monitor or anything else stupid, it should be 100% secure no matter what happens.

    This is how the world worked between roughly 1950 and 2010. Why is stuff like 2FA suddenly necessary?

    (You can probably guess my opinion -- I hate this stuff with a passion and I've actually had quite "energetic" chats with Apple representatives, asking them in no vague terms to turn it off).

    According to these companies, passwords tend to be re-used by people on all kinds of different accounts or they choose easily guessed passwords.

  • edited July 2022
    The user and all related content has been deleted.
  • edited July 2022

    @NeuM said:

    @SevenSystems said:
    Can I ask a stupid question?

    OK.

    Why is 2FA, a "Forgot password" feature, or any of those sorts of things necessary at all?

    If I have a secure (i.e., non-trivial, long enough, non-dictionary) password, and I don't put it on a yellow sticky note on my monitor or anything else stupid, it should be 100% secure no matter what happens.

    This is how the world worked between roughly 1950 and 2010. Why is stuff like 2FA suddenly necessary?

    (You can probably guess my opinion -- I hate this stuff with a passion and I've actually had quite "energetic" chats with Apple representatives, asking them in no vague terms to turn it off).

    According to these companies, passwords tend to be re-used by people on all kinds of different accounts or they choose easily guessed passwords.

    OK, but how is that a problem of the companies? i.e. car manufacturers also aren't adding 5 more locks to each door just because people misplace their keys!

  • The user and all related content has been deleted.
  • Sorry for reviving this thread. What do you guys do if you don't want to use your personal phone number for 2FAs?

  • edited May 2024

    @Nuggetz said:
    Sorry for reviving this thread. What do you guys do if you don't want to use your personal phone number for 2FAs?

    If possible use an Authenticator app. Microsoft has one, Google has one. You usually scan a QR code provided by the platform and then it adds a time based token into the app for you to use for subsequent logins. I use Gmail as my main email account and the Google Authenticator will save the 2FA accts to my Google acct for cross platform use. It’s nice. Have to hope Google doesn’t get popped.

    There’s some misinformation in this thread. 2FA is definitely not the same as forgot password (though with 2FA enabled you will need to provide your second factor as part of that process). The password is something you know, the 2FA is something you have. Even using SMS is better than using nothing (some sites/apps/platforms don’t support a 2FA app yet, even though it’s 2024 🫠)

    Even if you use a CRAZY good password, if where it’s being stored is using shitty cryptographic techniques for storing that password (or hell, storing it in plain text, god forbid) it doesn’t matter how good your password is. It could be “password” or “1 Super Awesome Password!” and it’s compromised if the platform gets popped..

    Anyway, tl;dr -> 2FA is best, SMS is second, a service that won’t allow either is a service I won’t use.

    Regarding original OP question I’ve been using the Apple 2FA for Apple services and what not for years now, it’s fine. No issues. I guess if I lost my phone, watch and iPad I’d be fucked lol, but I kind of think I’d have other things to worry about at that point…

  • The user and all related content has been deleted.
  • @iammane said:
    Anyway, tl;dr -> 2FA is best, SMS is second, a service that won’t allow either is a service I won’t use.

    Man it's interesting how perspectives differ! For me it's "A service that requires 2FA is a service I won't use (if there's alternatives)" ☺️

  • edited May 2024

    I’ve got nothing against 2FA, and I can understand its advantages. The biggest disadvantage I can see are sites that enforce 2FA, but do not allow multi user access to the service they offer. A nightmare for an IT contractor like myself, when you always have to chase after that 2FA SMS that was sent to a clients member of staff or manager.
    And I notice another paranoia driven trend: Repeated 2FA! For every little shi**y thing you do on some sites, you have to reauthenticate again and again.

  • The user and all related content has been deleted.
  • edited May 2024
    The user and all related content has been deleted.
  • The user and all related content has been deleted.
  • edited May 2024

    @Danny_Mammy said:
    well with the microsoft authenticator app i can see when someone is trying to log into my email, that's pretty cool. there is no way they can get in even if they have my password.

    How often does that happen? Just curious... In recent years I've been getting all these annoying "SECURITY ALERT: [...]" e-mails whenever I log into any of my accounts, so I've added a filter rule to my email that marks any email with "Security" or "Alert" in the subject line as SPAM...

    (the actual filter rule is a bit more sophisticated but I'm just paraphrasing as I usually do...)

  • @catherder said:
    I’ve got nothing against 2FA, and I can understand its advantages. The biggest disadvantage I can see are sites that enforce 2FA, but do not allow multi user access to the service they offer. A nightmare for an IT contractor like myself, when you always have to chase after that 2FA SMS that was sent to a clients member of staff or manager.

    Exactly, I've been through this countless times with an agency I do IT stuff for remotely... we've decided to switch to alternative providers because of it.

    And I notice another paranoia driven trend: Repeated 2FA! For every little shi**y thing you do on some sites, you have to reauthenticate again and again.

    That's my bank! 😂 2FA for logging in. 2FA for adding a payee. 2FA for sending the payment.

  • edited May 2024

    @SevenSystems said:
    If I have a secure (i.e., non-trivial, long enough, non-dictionary) password, and I don't put it on a yellow sticky note on my monitor or anything else stupid, it should be 100% secure no matter what happens.

    Did you ever heard about "man in the middle" attack ? :-)

    This is how the world worked between roughly 1950 and 2010. Why is stuff like 2FA suddenly necessary?

    Becasue of "man in the middle" attack :-)

    In general, you cannot be enough paranoid when it comes to online security ;-)

  • @dendy said:

    @SevenSystems said:
    If I have a secure (i.e., non-trivial, long enough, non-dictionary) password, and I don't put it on a yellow sticky note on my monitor or anything else stupid, it should be 100% secure no matter what happens.

    Did you ever heard about "man in the middle" attack ? :-)

    This is how the world worked between roughly 1950 and 2010. Why is stuff like 2FA suddenly necessary?

    Becasue of "man in the middle" attack :-)

    I've heard about this... just glanced at the first paragraph of the Wikipedia article. Shouldn't this be impossible with HTTPS, which is what literally 100% of websites and APIs that process sensitive information use?

  • edited May 2024
    The user and all related content has been deleted.
  • @Danny_Mammy said:

    @SevenSystems said:

    @Danny_Mammy said:
    well with the microsoft authenticator app i can see when someone is trying to log into my email, that's pretty cool. there is no way they can get in even if they have my password.

    How often does that happen? Just curious... In recent years I've been getting all these annoying "SECURITY ALERT: [...]" e-mails whenever I log into any of my accounts, so I've added a filter rule to my email that marks any email with "Security" or "Alert" in the subject line as SPAM...

    (the actual filter rule is a bit more sophisticated but I'm just paraphrasing as I usually do...)

    mmmm, so it like waiting for a bus. you might not get the authorizer pinging you because a scumbag is trying to access your email (or whatever program is linked) for like 2 months then over a 24-hour period you'll get 3 or 4 attempts.

    it's actually quite enjoyable to deny them access.

    Really! OK... yeah I must admit I'd rather be walking in the forest or on the beach with the phone in airplane mode than reading security alerts and actively denying people access who don't know my password anyway 😄 (no sorry I know... I'm just terribly pragmatic, to a fault!)

    But tastes are different, and that's a good thing! Just sharing my "don't-give-a-fsck" perspective which is just as valid or invalid as anyone else's...

  • The user and all related content has been deleted.
Sign In or Register to comment.