South Dakota first to ban TikTok on state-owned devices

Re:South Dakota first to ban TikTok on state-owned devices by technion on Friday December 02, 2022 @04:22PM (#33837103)

My wife worked for the government.

When they deployed wfh, they used mfa. They banned Google authenticator out of the view Google can't be trusted. But told people to search the app store for any other mfa app. They one my wife found makes you wait for an ad run before it displays the code. It sometimes crashes and is generally terrible.

The point being banning certain apps seems far more political than well thought out.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by ketzo on Friday December 02, 2022 @04:35PM (#33837253)

Sorry, their official MFA policy was "just go find a random one"? How would that even work? Do they have a contract with every MFA service?

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by nthn_g on Friday December 02, 2022 @04:48PM (#33837389)

I would presume a random TOTP app. Incredibly stupid policy nonetheless.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by technion on Friday December 02, 2022 @04:48PM (#33837394)

Yes that was the official policy. I was in such disbelief I made her show me the official guide she was given. Of course im sure they had no contracts anywhere, it looked like someone simply said "google will sell your data" and someone senior bought it and banned one app.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by cesarb on Friday December 02, 2022 @04:54PM (#33837458)

> How would that even work?

TOTP is a standard (https://www.rfc-editor.org/rfc/rfc6238), so I don't see how that wouldn't work.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by wyldfire on Saturday December 03, 2022 @01:48AM (#33841309)

It wouldn't work if the app implementing TOTP decided to share the seeds you stored in it.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by DocTomoe on Saturday December 03, 2022 @02:07AM (#33841400)

Let's just assume that not ALL government agencies employ rocket scientists.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by ThePowerOfFuet on Saturday December 03, 2022 @04:17AM (#33842038)

> Sorry, their official MFA policy was "just go find a random one"? How would that even work? Do they have a contract with every MFA service?

TOTP is a standard, so anyone can implement it.

https://www.rfc-editor.org/rfc/rfc6238

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by vlunkr on Friday December 02, 2022 @04:57PM (#33837508)

Authy is good, or freeotp if you want to go full FOSS.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by nano9 on Friday December 02, 2022 @07:38PM (#33838952)

Duo Mobile on iOS lets you save and restore your TOTP tokens across iPhone backups with a symmetric passphrase. It provides some peace of mind in the event you would lose your phone.

[ Parent | on HN ]

Re:South Dakota first to ban TikTok on state-owned devices by userbinator on Friday December 02, 2022 @10:12PM (#33840166)

I find it very sad that the government isn't even capable of writing its own presumably TOTP authenticator app.

[ Parent | on HN ]