Google Docs Users Targeted by Phishing Scam

Re:Google Docs Users Targeted by Phishing Scam by juliann on Friday March 14, 2014 @02:47PM (#7400929)

The two step app works even with no connection to the internet. I dont know how but it does. I think you dont need to have the same sim card. only the phone turned on.

[ Parent | on HN ]

Re:Google Docs Users Targeted by Phishing Scam by tjohns on Friday March 14, 2014 @03:00PM (#7401002)

Google Authenticator uses TOTP (RFC 6238), which means the codes are a function of time plus a secret key. As long as your phone's clock is reasonably accurate, the app will work without any network access.

http://tools.ietf.org/html/rfc6238

[ Parent | on HN ]

Re:Google Docs Users Targeted by Phishing Scam by UnfalseDesign on Friday March 14, 2014 @03:27PM (#7401184)

You definitely don't need network access. I use Google Authenticator on my Wifi only tablet. You need an internet connection to sync it to Google's key but not after that. And, yes, when the tablet's clock is off by a few minutes, the code doesn't work.

[ Parent | on HN ]

Re:Google Docs Users Targeted by Phishing Scam by herge on Friday March 14, 2014 @03:00PM (#7401000)

I think that the two step code is a hash of a random number shared between Google and the app (when reading the QR code), and the current time.

[ Parent | on HN ]