News for hackers. Stuff that matters.
Re:SMS is not 2FA-secure by jkepler on Friday January 10, 2020 @10:10PM (#22017831)
Why not use an open TOTP app like AndOTP. I use it all the time for sites that claim to require Google Authenticator, it works, and its easy to backup the secrets as plain text or encrypted with a password. I keep it current on my primary phone and a cheap offline backup, in addition to backing up the encrypted secrets file.
Re:SMS is not 2FA-secure by balladeer on Saturday January 11, 2020 @01:30AM (#22018535)
I use Authy on iPhone and Mac. I am looking for an OSS replacement but would not want to setup everything from scratch after I change device reinstall the app like Google Authenticator.
Re:SMS is not 2FA-secure by __david__ on Saturday January 11, 2020 @08:24AM (#22019726)
https://freeotp.github.io/

iPhone backups back up its data correctly—my codes survive new phone restores where they do not with Google Authenticator.

Re:SMS is not 2FA-secure by samatman on Saturday January 11, 2020 @05:19PM (#22022757)
Thanks for sharing this link.

I've wanted to get off Google Authenticator for awhile now, mostly because of the backup-restore problem, also a general trend of limiting my involvement with the company.

Re:SMS is not 2FA-secure by sneak on Saturday January 11, 2020 @02:17AM (#22018647)
Bitwarden does a decent job of storing and syncing TOTP codes. Make sure you always use a long password with Bitwarden though, to avoid a known and unpatched issue with their password-based key derivation.
Re:SMS is not 2FA-secure by balladeer on Saturday January 11, 2020 @03:21AM (#22018860)
Oh, didn’t know BitWarden did it. That’s my password manager :)
Re:SMS is not 2FA-secure by AaronFriel on Saturday January 11, 2020 @12:42PM (#22021154)
What issue is that?
Re:SMS is not 2FA-secure by sneak on Saturday January 11, 2020 @06:10PM (#22023072)