News for hackers. Stuff that matters.

A comment on Aegis Authenticator – Open-source 2FA for Android. Parent comment

Re:Aegis Authenticator – Open-source 2FA for Android by ignitionmonkey on Saturday January 16, 2021 @05:00PM (#25805911)
Icon packs are coming. [1] Steam accounts can be imported if you have root access, or you can try [2].

IIRC Steam codes are almost standard except they use a different encoding because... Valve likes to roll their own stuff (?). I agree that trading makes only having codes a bit less useful. They could've used the same codes to confirm trades instead of an entirely separate interface.

[1] https://github.com/beemdevelopment/Aegis/issues/509

[2] https://github.com/beemdevelopment/Aegis/wiki/Adding-Steam-t...

[ Parent | on HN ]
Re:Aegis Authenticator – Open-source 2FA for Android by MayeulC on Saturday January 16, 2021 @05:25PM (#25806091)
Thanks for pointing this out.

Yeah, steam rolling their own stuff is a bit troublesome at ties, but I think they were among the first to use TOTP tokens, IIRC ? There was a story here the other day on how they roll their own password encryption over HTTPS for logging in... It's a shame they don't use standard authentication mechanisms, though.

And I should clarify: my yubikey is my main 2FA token, though support for U2F/Webauthn is a bit limited.

[ Parent | on HN ]