News for hackers. Stuff that matters.

A comment on FTC fines Twitter $150M for using 2FA phone numbers for ad targeting. Parent comment

Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by heavyset_go on Wednesday May 25, 2022 @07:02PM (#31511973)
Vaultwarden has TOTP support built in, and there are like a dozen open source TOTP authentication apps out there. There's no reason you have to use an app that invades your privacy for TOTP.
[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by bbarnett on Wednesday May 25, 2022 @08:26PM (#31512720)
Sadly, it uses rust nightly, making setup bleeding edge.

And node, meaning it's a security nightmare.

There are likely other options I guess, but for something of this level (keys to your, or a company's kingdom!), I'd want to see a project with an arm long history, loads of review, etc.

[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by heavyset_go on Wednesday May 25, 2022 @09:15PM (#31513080)
The Vaultwarden I'm using uses stable Rust 1.60 and Node isn't involved at all.
[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by bbarnett on Wednesday May 25, 2022 @09:28PM (#31513170)
The build docs talk of the above.
[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by heavyset_go on Friday May 27, 2022 @08:29PM (#31536471)
Ah, good point. I'm able to build Vaultwarden with stable Rust, so maybe it's just a requirement for development. Vaultwarden lifts web-vault from Bitwarden, which uses Node, but you aren't required to run it with web-vault.
[ Parent | on HN ]