News for hackers. Stuff that matters.
Re:De-Googling TOTP Authenticator Codes by wahlis on Monday September 01, 2025 @12:01PM (#45093830)
I believe Aegis has you sorted with Steam as well
Re:De-Googling TOTP Authenticator Codes by FinnKuhn on Monday September 01, 2025 @12:34PM (#45094180)
Couldn't Steam break this any second though?
Re:De-Googling TOTP Authenticator Codes by butz on Monday September 01, 2025 @04:33PM (#45096383)
Or one could run into some edge case, e.g. when Steam asks for different code when trying to change Steam password - https://github.com/beemdevelopment/Aegis/issues/1613 .
Re:De-Googling TOTP Authenticator Codes by mdaniel on Monday September 01, 2025 @05:05PM (#45096598)
https://github.com/beemdevelopment/Aegis/blob/v3.4.1/app/src...

> // NOTE: this assumes that a global root shell has already been obtained by the caller

:-/

My recollection when I last tried this stunt is that it's a boatload of nonsense to try and exfiltrate the Steam credential material, and I wasn't able to find any supporting docs in the Aegis nor on their site about any alternative they have to "root your phone and sniff the keys out of the sibling app"