News for hackers. Stuff that matters.

A comment on The bleak picture of two-factor authentication adoption in the wild. Parent comment

Re:The bleak picture of two-factor authentication adoption i... by peterwwillis on Sunday December 23, 2018 @04:30PM (#18748464)
TOTP is old and busted, U2F is the new hotness.

https://en.m.wikipedia.org/wiki/Universal_2nd_Factor

[ Parent | on HN ]
Re:The bleak picture of two-factor authentication adoption i... by slezyr on Sunday December 23, 2018 @06:19PM (#18749077)
> The device key is secured against duplication by a degree of social trust in the commercial manufacturer

TOTP sounds much better. Also doesn't requires "trusted magic hardware"

[ Parent | on HN ]
Re:The bleak picture of two-factor authentication adoption i... by peterwwillis on Monday December 24, 2018 @04:20PM (#18754323)
U2F prevents some vulnerabilities that TOTP alone can't. It's possible to replicate it in software instead of a hardware token, but so far nobody has. So if you're adopting 2FA, suggestion is to use U2F if you can.
[ Parent | on HN ]