News for hackers. Stuff that matters.

A comment on Safari tries to fill username. Parent comment

Re:Safari tries to fill username by ascar on Friday May 28, 2021 @08:27AM (#27314556)
No need to be sarcrastic. He is absolutely right. The seed is all you need in case of the common TOTP algorithm. There is no connection to the device.

In fact, in Google Authenticator you can even conveniently export all running TOTP to another Google Authenticator without any connection with the apps or anything else whatsoever.

[ Parent | on HN ]
Re:Safari tries to fill username by nl on Sunday May 30, 2021 @11:30PM (#27339748)
That wasn't supposed to be sarcastic at all.

I was in total agreement with him - you can in theory run the algorithm by hand.

It isn't especially relevant though - 2-factor is "something you know, something you have". You need to have the hash.

[ Parent | on HN ]