News for hackers. Stuff that matters.
Re:Requiring MFA on popular gem maintainers by rgoulter on Tuesday August 16, 2022 @10:00AM (#32482837)
QR code scanning is intended for mobile phone cameras as a way of communicating a TOTP secret.

When presented with a TOTP secret, every website I've seen has presented the option to show the TOTP secret as text, which can be copied across.

A password database like KeepassXC can store the TOTPs.

FIDO / U2F hardware like Yubikeys (or various alternatives) are also a convenient second factor.

There are no comments on this comment yet.