News for hackers. Stuff that matters.
Re:How to Secure a Linux Server by Fnoord on Saturday February 16, 2019 @10:03AM (#19178811)
You don't have to use a closed source TOTP client such as Google's. There's RedHat's FreeOTP and there's another open source one called antOTP. You can find them on F-Droid as well.

There have been TOTP PAM modules for ages (these work on a Linux client and Linux server via e.g. SSH). You can even add YubiKey to PAM. Same for BSD Auth and macOS.

Re:How to Secure a Linux Server by noinsight on Saturday February 16, 2019 @10:31AM (#19178997)
> RedHat's FreeOTP

It's abandonware these days and hasn't been updated for years. The iOS app doesn't work anymore and can't use the camera for reading codes.

Re:How to Secure a Linux Server by Avamander on Saturday February 16, 2019 @06:38PM (#19181658)
TOTP/HOTP hasn't changed for years. The app works perfectly for me and needs no updates.
Re:How to Secure a Linux Server by dfed-mpls on Saturday February 16, 2019 @12:41PM (#19179764)
I use it on ios, and so does most of Red Hat employees (they state it is a preferred version of tfa over the google app.)

It's not broken for the 15 or so accounts I use it for.

Re:How to Secure a Linux Server by noinsight on Saturday February 16, 2019 @05:14PM (#19181272)
Try the "scan code" button which should activate the camera and the app will crash. I just tested it with my iPhone and verified. The iOS App Store application was last updated 4 years ago. There's also comments there saying it doesn't work anymore.

Reading / using existing codes might work properly, or manually inputting them.

Re:How to Secure a Linux Server by dfed-mpls on Sunday February 17, 2019 @01:46PM (#19186044)
Interestingly my wife's XS is having the problem you describe but not my X.

I've sent a note to the maintainers, but there's an open git issue for it. Not sure when their commits will roll to the store.

I'm told by multiple colleagues at redhat that they've raised this with internal support, so it should be sorted eventually. Lots of iphones in redhat and this is the app they officially support for TFA internally.

Re:How to Secure a Linux Server by dfed-mpls on Sunday February 17, 2019 @02:48AM (#19183212)
Nope. I used that feature just today to add another account. Works on my iPhone X.
Re:How to Secure a Linux Server by dfed-mpls on Sunday February 17, 2019 @02:50AM (#19183218)
Also, the last commit to the app was a year ago, if you head to their github page.

https://github.com/freeotp/freeotp-ios/commits/master

Re:How to Secure a Linux Server by imthenachoman on Monday February 18, 2019 @06:20PM (#19195394)
When I was researching, literally every article I read mentioned Google'S TOTP PAM module. I can't even find any other ones that have active development. Do you know of any? Would love to use another one if it works with my iOS authenticator app.