News for hackers. Stuff that matters.

A comment on Safari tries to fill username. Parent comment

Re:Safari tries to fill username by batch12 on Friday May 28, 2021 @07:31AM (#27314101)
Yeah, TOTP is a password. Hell, it is in the name. One property it has that differs from classic passwords is the authentication factor. For TOTP, it changes from something you know you something you have. However, lots of passwords are now randomly generated and are no longer "something you know" either.
[ Parent | on HN ]
Re:Safari tries to fill username by lucideer on Friday May 28, 2021 @07:49AM (#27314222)
> it is in the name

The "Password" named in "Time-based One Time Password" is the temporary generated value you transmit. It's not what's stored on the TOTP device, so in the context of this discussion, that temp value isn't what the gp was referring to.

[ Parent | on HN ]
Re:Safari tries to fill username by thaumasiotes on Friday May 28, 2021 @07:50AM (#27314229)
> Yeah, TOTP is a password. Hell, it is in the name.

Careful; "one-time password" is in the name, and it certainly isn't that. Your TOTP seed stays valid forever.

[ Parent | on HN ]