News for hackers. Stuff that matters.
Re:I've locked myself out of my digital life by avh02 on Tuesday June 07, 2022 @10:49AM (#31655180)
Yeah i stopped using authy the first time a token was automatically seeded this way (may have been another way, but it was automatic and I didn't like it because I was also using the seed on my Pebble which i could then no longer do with this method). i prefer manual control over stuff like that and definitely don't want it assuming some magic is okay.
Re:I've locked myself out of my digital life by TedDoesntTalk on Tuesday June 07, 2022 @07:10PM (#31661168)
I think you’re being a little paranoid:

https://support.authy.com/hc/en-us/articles/360036077534-Aut...

“How do you derive encryption keys from a Backup Password?

We use the National Institute of Standards and Technology (NIST) recommended algorithm PBKDF2.”

Re:I've locked myself out of my digital life by avh02 on Wednesday June 08, 2022 @03:49PM (#31673023)
Oh no that's fine, I just didn't like the initial seeds for a new 2fa enrollment being magically transferred to the authy app without my control/intervention. See https://authy.com/guides/twilio/ and note that it's not the usual "scan the qr code". The seed is transmitted straight to authy, which, safe or not, takes away control from me to add that same seed elsewhere.