News for hackers. Stuff that matters.
Re:Aegis Authenticator – Open-source 2FA for Android by teamspirit on Saturday January 16, 2021 @04:53PM (#25805852)
My big thing with these apps, Authy, Duo, Google Authenticator is site icons. Authy finally figured out a way to query the website and either get the favicon or some image from the website. I know, it's really the most minuscule part but it frustrates me to see "(D)" for Digital Ocean. But it's enough to keep me with it.
Re:Aegis Authenticator – Open-source 2FA for Android by ignitionmonkey on Saturday January 16, 2021 @05:17PM (#25806044)
Icon packs are coming [1] and you can set your own for the more niche sites.

The problem with querying websites for their icon is that it leaks data about you (your phone and desktop) to a third-party without a proxy, requires a domain to match against, and like with Authy, the icons go out of date and become inconsistent. Worst of all, you have to give network access to the entire app for a trivial feature, making it less secure and trustworthy. Offline icon packs that have a consistent look is a good solution to all of this. [2]

[1] https://github.com/beemdevelopment/Aegis/issues/509

[2] https://github.com/aegis-icons/aegis-icons

Re:Aegis Authenticator – Open-source 2FA for Android by Fnoord on Sunday January 17, 2021 @08:20AM (#25810437)
Bitwarden has this feature, and it is optional. I wouldn't mind if Aegis has it, as long as it is optional.
Re:Aegis Authenticator – Open-source 2FA for Android by enshake on Saturday January 16, 2021 @05:21PM (#25806062)
Authy now adds the site logo automatically. If not, you can search one up in the app