News for hackers. Stuff that matters.
Re:Safari tries to fill username by nl on Sunday May 30, 2021 @11:32PM (#27339758)
It's not a password.

A password/passphrase/passcode is something you know.

A hash for a TOTP is something you have. 2 factor means something you know and something you have (or something you are): https://dis-blog.thalesgroup.com/security/2011/09/05/three-f...

(And yes in theory you could remember the hash, and have a custom TOTP client that lets you enter it in. But unless you do this it is a theoretical argument only).

There are no comments on this comment yet.