News for hackers. Stuff that matters.

A comment on Two-factor Authentication. Parent comment

Re:Two-factor Authentication by aroman on Tuesday September 03, 2013 @02:55PM (#6322913)
How is twitter's 2fa completely new? I use it and it behaves exactly like Google's does.
[ Parent | on HN ]
Re:Two-factor Authentication by cheald on Tuesday September 03, 2013 @03:04PM (#6322979)
When they rolled it out, it was SMS-only. It still doesn't use TOTP - they've baked something into their mobile app that allows it to function as the second factor, rather than just supporting the same 2FA scheme that everyone else does.
[ Parent | on HN ]
Re:Two-factor Authentication by aroman on Tuesday September 03, 2013 @03:12PM (#6323039)
Ah, I wasn't aware they didn't support TOTP; I only ever use sms based 2fa.
[ Parent | on HN ]
Re:Two-factor Authentication by Sachse on Tuesday September 03, 2013 @03:03PM (#6322978)
Since they don't use TOTP it's not possible to use their two-factor authentication with applications such as Google Authenticator or Authy. What's more, I don't think it even works with third-party Twitter clients (Correct me if I'm wrong), so you have to use Twitter's own apps.
[ Parent | on HN ]
Re:Two-factor Authentication by aroman on Tuesday September 03, 2013 @03:11PM (#6323029)
It does indeed work with third-party apps using Google-style "app specific passwords". But I didn't know that it didn't support TOTP since I only use SMS authentication. I can see that as being a lame move, though.
[ Parent | on HN ]