News for hackers. Stuff that matters.
Re:TOTP Codes in the Terminal by pseufaux on Sunday February 25, 2024 @07:12PM (#39506356)
1Password wrote a blog post stating something similar. Basically it comes down to if you're using TOTP as a true second factor. If you are it really shouldn't even be accessible from the same device.

https://blog.1password.com/totp-and-1password/

Re:TOTP Codes in the Terminal by alwayslikethis on Sunday February 25, 2024 @07:16PM (#39506376)
I suspect most people aren't though. Most people are just being forced or nudged to using it. The main purpose for platform providers to push TOTP is probably consumers reusing passwords leading to account compromise, but if you are using a password manager, you can generate high entropy single-use passwords which don't really have that problem.
Re:TOTP Codes in the Terminal by Borealid on Monday February 26, 2024 @05:42AM (#39509696)
A TOTP protects you against a replay of your password after it's typed into a compromised computer.