toad.social

itsFriday<a href="https://toot.community/@thesweetcheat" class="u-url mention" rel="nofollow noopener" target="_blank">@thesweetcheat</a> Not sure if it is the exact same server software, but at my work place I also need MFA and instead of the told Microsoft app I use <a href="https://toot.community/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a>+ and it works. Maybe worth a try.

mgorny-nyan (he) :autism:🙀🚂🐧The history of my phones: <a href="https://social.treehouse.systems/tags/Motorola" class="mention hashtag" rel="nofollow noopener" target="_blank">#Motorola</a> ROKR E6 (running MontaVista Linux) → moto e(2) → moto G6 (stock <a href="https://social.treehouse.systems/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> → <a href="https://social.treehouse.systems/tags/LineageOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#LineageOS</a>) → <a href="https://social.treehouse.systems/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#Google</a> Pixel 8a (<a href="https://social.treehouse.systems/tags/GrapheneOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#GrapheneOS</a>). Why the change? Well, <a href="https://social.treehouse.systems/tags/Lenovo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Lenovo</a> is killing Motorola brand for years now.A few thoughts after the first day using it, and comparing it to 5 year old Motorola with barely working software:1. Pixel: 7 years software updates + good alternatives. Motorola: 2 years + poorly working LineageOS port, whose support just ended. You could say you either pay directly to Google, or you buy competition and pay in your data.2. It made me think of "value" moto e(2) — no charger, not even a back cover, but there's Gorilla Glass and good hardware. Well, except that the price isn't "value".3. It's not really pretty, I'm going to need to find a case to even out the back. Moto G6 was a piece of art compared to it.4. It didn't reboot of its own accord even once yet. Moto G6 rebooted at least daily.5. You can call more than once. Moto G6 used to hang after a single call — you couldn't make or receive another one, and it drained the battery.6. Location catches in a few seconds, compared to a few minutes of standing still with Moto G6, in good weather.7. Data transfer was successful. It's much easier when you're doing it across phones, rather than from backups. Even Matrix and <a href="https://social.treehouse.systems/tags/GadgetBridge" class="mention hashtag" rel="nofollow noopener" target="_blank">#GadgetBridge</a> didn't cause any issues.8. Restore in <a href="https://social.treehouse.systems/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> doesn't work. Fortunately, during the last migration I've backed up all the secrets externally.9. The fingerprint reader in the screen is usable, and I'm getting the hang of gesture navigation. However, the under-screen fingerprint reader + navigation in Moto G6 was just brilliant. I still couldn't find any convenient way of locking the screen.10. Performance and RAM is much better. It just doesn't keep killing the apps I'm using.11. I haven't tested the screen in the sunlight yet, but I suspect it's going to be better. G6 was pretty horrible, even compared to the value e(2).12. The government mObywatel app is working. Just saying.13. Multiling O keyboard sometimes shows under the bottom "keyboard control" bar, sometimes above it — very annoying.

Ch M[ae][iy]e?r 🇪🇺 🖤 🤍<a href="https://amt.social/@BjoernBeck" class="u-url mention" rel="nofollow noopener" target="_blank">@BjoernBeck</a> gab es da nicht ein fettes <a href="https://digitalcourage.social/tags/Antifeature" class="mention hashtag" rel="nofollow noopener" target="_blank">#Antifeature</a> bei <a href="https://digitalcourage.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a>, weshalb man lieber den Fork <a href="https://digitalcourage.social/tags/FreeOTPplus" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTPplus</a> verwenden möchte? 🤔 Das mag so zwei oder drei Jahre her sein, ...

ʙwɑnɑ нoɴoʟʊʟʊ :kverified:<a href="https://writing.exchange/@vantablue" class="u-url mention" rel="nofollow noopener" target="_blank">@vantablue</a> I've been using <a href="https://discordian.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> (available on F-Droid) for a few months now, seems just simple and clean, never had any trouble. Don't know about your requirements etc. of course.

Todd KnarrSwitching from <a href="https://mstdn.social/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#Google</a> Authenticator on my phone to <a href="https://mstdn.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a>. GA's started not updating TOTP codes when opened if you aren't backing them up to their servers, which I'm not about to do. Something about time sync, which is BS.

Stéphane BortzmeyerQuelque chose qu'on a : ça peut être de la crypto symétrique (protocole <a href="https://mastodon.gougere.fr/tags/TOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#TOTP</a>, l'oratrice utilise <a href="https://mastodon.gougere.fr/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> sur son malinphone) Pour illustrer SHA-1, il y a une image de 🐈 <a href="https://mastodon.gougere.fr/tags/ParisWeb" class="mention hashtag" rel="nofollow noopener" target="_blank">#ParisWeb</a>

Jörg :fedora:<a href="https://social.tchncs.de/@kaffeeringe" class="u-url mention" rel="nofollow noopener" target="_blank">@kaffeeringe</a> Gebe dir grundsätzlich Recht, aber zumindest in Verbindung mit meinem Arbeitsaccount funktioniert sie auch ohne Standort-Berechtigung.Alternative zu <a href="https://social.tchncs.de/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a>+ kann auch <a href="https://social.tchncs.de/tags/Aegis" class="mention hashtag" rel="nofollow noopener" target="_blank">#Aegis</a> sein (F-Droid).

Steffen VoßDer <a href="https://social.tchncs.de/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> Authenticator hat seit Jahren einen Bug, der dazu führt, dass alte Zugangsdaten gelöscht werden, wenn man neue hinzufügt. Viel grundsätzlicher finde ich problematisch, dass die Android App dauerhaft im Hintergrund den Standort trackt. Nutzt <a href="https://social.tchncs.de/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a>+<a href="https://www.csoonline.com/article/3480918/design-flaw-has-microsoft-authenticator-overwriting-mfa-accounts-locking-users-out.html" rel="nofollow noopener" translate="no" target="_blank">https://www.csoonline.com/article/3480918/design-flaw-has-microsoft-authenticator-overwriting-mfa-accounts-locking-users-out.html</a>

Karl Voit :emacs: :orgmode:Has anybody successfully converted his/her <a href="https://graz.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> (2.x) <a href="https://graz.social/tags/TOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#TOTP</a> entries to <a href="https://graz.social/tags/Aegis" class="mention hashtag" rel="nofollow noopener" target="_blank">#Aegis</a>? <a href="https://github.com/beemdevelopment/Aegis/issues/1084" rel="nofollow noopener" translate="no" target="_blank">https://github.com/beemdevelopment/Aegis/issues/1084</a> reads like there is no chance at all at the moment ... 🤔 FreeOTP only exports into its xml files where I could not find a conversion tool to any input file format for Aegis so far.<a href="https://gitlab.com/stavros/freeotp-to-andotp-migrator" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/stavros/freeotp-to-andotp-migrator</a> fails<a href="https://github.com/half-duplex/freeotp-export" rel="nofollow noopener" translate="no" target="_blank">https://github.com/half-duplex/freeotp-export</a> is just a parser, not something that writes a format itself

Karl Voit :emacs: :orgmode:Millions Of <a href="https://graz.social/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#Google</a>, <a href="https://graz.social/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener" target="_blank">#WhatsApp</a>, <a href="https://graz.social/tags/Facebook" class="mention hashtag" rel="nofollow noopener" target="_blank">#Facebook</a> <a href="https://graz.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> Security Codes Leak Online <a href="https://www.forbes.com/sites/daveywinder/2024/03/04/millions-of-google-whatsapp-facebook-2fa-security-codes-leak-online/?sh=708c2f2774d1" rel="nofollow noopener" translate="no" target="_blank">https://www.forbes.com/sites/daveywinder/2024/03/04/millions-of-google-whatsapp-facebook-2fa-security-codes-leak-online/?sh=708c2f2774d1</a><a href="https://graz.social/tags/PIN" class="mention hashtag" rel="nofollow noopener" target="_blank">#PIN</a> via <a href="https://graz.social/tags/SMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMS</a> (or <a href="https://graz.social/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a>) is a stupid idea anyway.Best case: <a href="https://graz.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO2</a> hardware tokens. Well invested ~20-50€.If you can't, use <a href="https://graz.social/tags/PassKeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#PassKeys</a> if you absolutely trust the service provider.Both protect against phishing.If not, use a trustworthy <a href="https://graz.social/tags/TOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#TOTP</a> app (<a href="https://graz.social/tags/GoogleAuthenticator" class="mention hashtag" rel="nofollow noopener" target="_blank">#GoogleAuthenticator</a> is NOT trustworthy any more!) like: <a href="https://graz.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> <a href="https://graz.social/tags/Aegis" class="mention hashtag" rel="nofollow noopener" target="_blank">#Aegis</a>Other 2FA methods are more or less insecure.<a href="https://graz.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://graz.social/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a>

Karl Voit :emacs: :orgmode:Wie man eine vertrauenswürdige Authentifizierungs-App auswählt <a href="https://www.karl-voit.at/2023/03/05/TOTP-Auswahl/" rel="nofollow noopener" translate="no" target="_blank">https://www.karl-voit.at/2023/03/05/TOTP-Auswahl/</a>... mit einer deutlichen Warnung vor dem <a href="https://graz.social/tags/GoogleAuthenticator" class="mention hashtag" rel="nofollow noopener" target="_blank">#GoogleAuthenticator</a>! <a href="https://graz.social/tags/publicvoit" class="mention hashtag" rel="nofollow noopener" target="_blank">#publicvoit</a> <a href="https://graz.social/tags/Authenticator" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authenticator</a> <a href="https://graz.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO2</a> <a href="https://graz.social/tags/TOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#TOTP</a> <a href="https://graz.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> <a href="https://graz.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> <a href="https://graz.social/tags/Sicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheit</a>

Dr. ØhmWollte mich nach einem Handywechsel vom Google Authenticator lösen und habe mir <a href="https://drohm.eu/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> heruntergeladen. Leider kann ich hier kein Backup erzeugen und nach einer kurzen GitHub Suche ist das wohl auch nicht geplant. Würde das gerne parallel auf iPad und iPhone nutzen, so wie den Google Authenticator auch. Kennt wer Alternativen?

Anarchozionist/Datenprolet<a href="https://chaos.social/tags/Github" class="mention hashtag" rel="nofollow noopener" target="_blank">#Github</a> nutzt 80-Bit Keys für TOTP-Token, damit die mit alten Versionen vom <a href="https://chaos.social/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#Google</a> Authenticator kompatibel sind. Das führt dazu, dass die Android-App <a href="https://chaos.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> den Token beim Erstellen als "unsicher" markiert, weil er nicht mindestens 128-Bit hat. Großartig, wie zwei Multi-Milliarden-Unternehmen die Sicherheit eines offenen Standards mit Abwärtskompatibilität unterminieren.<a href="https://github.com/orgs/community/discussions/75936#discussioncomment-7727594" rel="nofollow noopener" translate="no" target="_blank">https://github.com/orgs/community/discussions/75936#discussioncomment-7727594</a>

Karl Voit :emacs: :orgmode:<a href="https://emacs.ch/@brokenix" class="u-url mention" rel="nofollow noopener" target="_blank">@brokenix</a> Yes of course.Two months ago I even wrote an article on how to choose an auth tool but it's in German: <a href="https://karl-voit.at/2023/03/05/TOTP-Auswahl" rel="nofollow noopener" target="_blank">https://karl-voit.at/2023/03/05/TOTP-Auswahl</a>I currently use <a href="https://graz.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> and I've read good things about <a href="https://graz.social/tags/Aegis" class="mention hashtag" rel="nofollow noopener" target="_blank">#Aegis</a>: <a href="https://karl-voit.at/apps-I-am-using/" rel="nofollow noopener" target="_blank">https://karl-voit.at/apps-I-am-using/</a>The point of the story is not that <a href="https://graz.social/tags/TOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#TOTP</a> is a bad idea!My point is that you should avoid the <a href="https://graz.social/tags/cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloud</a> for anything that needs to be secure: <a href="https://karl-voit.at/cloud-data-conditions/" rel="nofollow noopener" target="_blank">https://karl-voit.at/cloud-data-conditions/</a> and <a href="https://karl-voit.at/cloud/" rel="nofollow noopener" target="_blank">https://karl-voit.at/cloud/</a>And <a href="https://graz.social/tags/GoogleAuthenticator" class="mention hashtag" rel="nofollow noopener" target="_blank">#GoogleAuthenticator</a> is only one app that provides TOTP out of many. <a href="https://graz.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a>

Nordnick :verified:<a href="https://500.social/@daj" class="u-url mention" rel="nofollow noopener" target="_blank">@daj</a> <a href="https://norden.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a>+

Rob McBrydeRe-post: Increasing online security with 2-factor authenticationI've been working on some tech guidelines for my church and beefing up my processes for securing my online footprints. In this post, I share what 2FA is and why and how to use it as part of your everyday online routines.<a href="https://fosstodon.org/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> <a href="https://fosstodon.org/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> <a href="https://fosstodon.org/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> <a href="https://fosstodon.org/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://fosstodon.org/tags/onlinesecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#onlinesecurity</a><a href="https://robmcbryde.com/increasing-online-security-with-2fa" rel="nofollow noopener" target="_blank">https://robmcbryde.com/increasing-online-security-with-2fa</a>

Senna 🌷Today I switched my authenticator app from Authy to <a href="https://mindly.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> because the former has sketchy telemetry and the latter is FOSS and made by Red Hat. I also added more of my accounts to the app. Better <a href="https://mindly.social/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> and <a href="https://mindly.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>!

dreamchipperIch experimentiere weiterhin mit der <a href="https://bildung.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> in <a href="https://bildung.social/tags/Nextcloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nextcloud</a>.Dank eurer Hinweise <a href="https://bildung.social/tags/fedilz" class="mention hashtag" rel="nofollow noopener" target="_blank">#fedilz</a> konnte ich für mich selbst auch <a href="https://bildung.social/tags/1Password" class="mention hashtag" rel="nofollow noopener" target="_blank">#1Password</a> nutzen, um den zweiten Faktor nicht in <a href="https://bildung.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> sondern in 1Pasword zu hinterlegen. Am <a href="https://bildung.social/tags/Mac" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mac</a> füllt dann 1Password erst meine Anmeldedaten und dann automatisch den zweiten Faktor aus. Das ist schon nice!<a href="https://support.1password.com/one-time-passwords/" rel="nofollow noopener" target="_blank">https://support.1password.com/one-time-passwords/</a>

dreamchipperNutzt jemand die Zweifaktorauthentifizierung <a href="https://bildung.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> in <a href="https://bildung.social/tags/nextcloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#nextcloud</a>? Ich möchte das gerne für unsere <a href="https://bildung.social/tags/Schule" class="mention hashtag" rel="nofollow noopener" target="_blank">#Schule</a> umsetzen, bin aber nicht ganz sicher, welche Nachteile das z.B. in Bezug auf Nutzung von mobilen Apps oder sonstigen mir noch gar nicht bekannten Punkten nach sich ziehen könnte.Wir nutzen für <a href="https://bildung.social/tags/moodle" class="mention hashtag" rel="nofollow noopener" target="_blank">#moodle</a> bereits die <a href="https://bildung.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a>. Dabei kommt die App <a href="https://bildung.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> zum Einsatz. <a href="https://freeotp.github.io/" rel="nofollow noopener" target="_blank">https://freeotp.github.io/</a> Gibt es hierzu Erfahrungen, ob sich die gleiche App auch beo <a href="https://bildung.social/tags/nextcloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#nextcloud</a> nutzen lässt?<a href="https://bildung.social/tags/fedilz" class="mention hashtag" rel="nofollow noopener" target="_blank">#fedilz</a>

Norbert Tretkowski<a href="https://systemli.social/@anneroth" class="u-url mention" rel="nofollow noopener" target="_blank">@anneroth</a> <a href="https://gruene.social/tags/FreeOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeOTP</a> von <a href="https://gruene.social/tags/RedHat" class="mention hashtag" rel="nofollow noopener" target="_blank">#RedHat</a>. Weil es unter einer freien Lizenz steht, unter Android schon problemlos funktioniert und vor kurzem, nach zugegeben langer Pause, ein großes Update erhalten hat.

Recent searches

Search options

Administered by:

Server stats:

#freeotp