News for hackers. Stuff that matters.

A comment on Show HN: Auto-OTP: automatically send and receive OTPs, end-to-end encrypted.

Re:Show HN: Auto-OTP: automatically send and receive OTPs, e... by nocsi on Friday January 07, 2022 @07:08PM (#29846861)
So this automatically degrades 2-factor to… 1 factor again. The security model doesn’t instill a lot of confidence in me, being that you expect user-interaction as a means of security. It’s already bad enough people are tying their OTP with their credentials in password managers…
[ Parent | on HN ]
Re:Show HN: Auto-OTP: automatically send and receive OTPs, e... by apugoneappu on Friday January 07, 2022 @07:43PM (#29847209)
It’s still 2 factor, just that a few permitted people have access to the one time password. It’s identical to manually sharing the OTP, just automated.

> The security model doesn’t instill a lot of confidence in me, being that you expect user-interaction as a means of security.

Could you please elaborate on what this means?

[ Parent | on HN ]
Re:Show HN: Auto-OTP: automatically send and receive OTPs, e... by jafjaf on Sunday January 09, 2022 @08:00PM (#29869281)
they are describing a trend where security is omitted or skipped because it’s inconvenient. even though OTP is used to increase security, it’s inconvenient for people so they go around it like this.
[ Parent | on HN ]