3 ms·
Paypal supports TOTP everywhere, but it’s hidden on a page not reachable via any of their sites, in their old site, and you need to run a custom python script t
by kuschku 9y ago
Paypal supports TOTP everywhere, but it’s hidden on a page not reachable via any of their sites, in their old site, and you need to run a custom python script to even generate the token you want.
- conorgil145 9y agoWow, that is horrible. Given that, I would argue that, for all intents and purposes, they do not support TOTP then. An average user has zero chance of doing all of that correctly. Bummer the don't support it as a first class citizen in their security UX on their main site. Care to share a direct link to the TOTP configuration site though?
- kuschku 9y agoThis repository contains the software required to generate the TOTP URL from the info PayPal provides to you, as well as the site you need to get to: https://github.com/claudiodekker/symantec-vip-otp-generator https://github.com/claudiodekker/symantec-vip-otp-generator And a blogpost explaining the backstory: https://www.cyrozap.com/2014/09/29/reversing-the-symantec-vip-access-provisioning-protocol/ https://www.cyrozap.com/2014/09/29/reversing-the-symantec-vi...
- zaarn 9y agoFor all I care, that means not supported.
- kuschku 9y agoWell, we’re on Hacker News here, aren’t we? In that way, it is "supported", for the people that are frequenting this site. But sure, for the average user, it’s basically useless.