News for hackers. Stuff that matters.

A comment on Two Factor Auth List.

Re:Two Factor Auth List by IgorPartola on Monday March 17, 2014 @12:54PM (#7416283)
Random: I really like how simple the Google Authenticator's TOTP algorithm is: https://github.com/tadeck/onetimepass/blob/master/onetimepas...

It's only a few lines of code and other than having sync'ed clocks does not require any other running services. At one point I implemented it as a second factor for my most important servers that I ssh to so that my IP would be unlocked for 45 minutes after the initial connection.

[ Parent | on HN ]
Re:Two Factor Auth List by StavrosK on Monday March 17, 2014 @01:51PM (#7416711)
Nitpick: It's not Google's, it's an open standard (OATH): http://tools.ietf.org/html/rfc6238

There's also HOTP.

[ Parent | on HN ]
Re:Two Factor Auth List by IgorPartola on Monday March 17, 2014 @02:33PM (#7417042)
You are right, I should have elaborated. Just like most people, I first learned about it from using the Google Authenticator app.
[ Parent | on HN ]
Re:Two Factor Auth List by StavrosK on Monday March 17, 2014 @02:37PM (#7417081)
Sure, I'm just clarifying that it's a standard (and thus awesome).
[ Parent | on HN ]