Re:De-Googling TOTP Authenticator Codes
by wahlis on Monday September 01, 2025 @12:01PM
(#45093830)
I believe Aegis has you sorted with Steam as well
[ Parent
| on HN ]
Re:De-Googling TOTP Authenticator Codes
by FinnKuhn on Monday September 01, 2025 @12:34PM
(#45094180)
Couldn't Steam break this any second though?
Or one could run into some edge case, e.g. when Steam asks for different code when trying to change Steam password - https://github.com/beemdevelopment/Aegis/issues/1613 .
Re:De-Googling TOTP Authenticator Codes
by mdaniel on Monday September 01, 2025 @05:05PM
(#45096598)
https://github.com/beemdevelopment/Aegis/blob/v3.4.1/app/src...
> // NOTE: this assumes that a global root shell has already been obtained by the caller
:-/
My recollection when I last tried this stunt is that it's a boatload of nonsense to try and exfiltrate the Steam credential material, and I wasn't able to find any supporting docs in the Aegis nor on their site about any alternative they have to "root your phone and sniff the keys out of the sibling app"