News for hackers. Stuff that matters.
Re:TOTP Codes in the Terminal by teddyh on Monday February 26, 2024 @03:36AM (#39508864)
Beware: That shell function will use the secret on a command line, leaking the secret to the process list, available to every user on the system. The oathtool manual page even warns about this.

I would instead recommend something like:

  totp() {
    oathtool --base32 --totp -- @<(keyring get totp "$1") | xclip
  }
(Bash required.)

There are no comments on this comment yet.