News for hackers. Stuff that matters.
Re:Show HN: Obsidian - OTP Authenticator by kevincox on Friday March 19, 2021 @03:41PM (#26517459)
I'm curious about the "daily backups". Does this mean that if the data is deleted from the Apple Keychain the app has a local copy that can be reverted to?
Re:Show HN: Obsidian - OTP Authenticator by r4id4 on Friday March 19, 2021 @04:15PM (#26517748)
Hi Kevin, every time you make a change (ie add a new token, delete a token, rename a token) a snapshot is made and saved under the current date. These snapshots are then stored always in the iCloud Keychian.

Anyway the Apple Keychain retain a local copy on the device, which means that even if in airplane mode Obsidian works by reading the local keychain.

Re:Show HN: Obsidian - OTP Authenticator by kevincox on Friday March 19, 2021 @04:53PM (#26518063)
Thanks for clarifying. It seems like this will prevent some issues such as deleting the wrong token howver storing all of your "backups" in the same place as your primary storage (iCloud) is not a good strategy. If anything wiped your keychain it would be propagated to all your devices (unless you leave some on airplane mode) and you are now locked out of your accounts.
Re:Show HN: Obsidian - OTP Authenticator by r4id4 on Friday March 19, 2021 @05:06PM (#26518147)
Apple Keychain is key-value storage, Obsidian stores tokens and backups under different keys to be able to avoid erroneous overwrites or key corruption.

Obviously if the whole keychain gets corrupted/wiped then there is no way to recover, but I find it unlikely, or at least never heard about it.