3 ms·
You shouldn’t scan two-factor authentication QR codes
- satya71 5y agoI actually have 50 different accounts with TOTP 2FA. I wonder what world the author lives in.
- dundarious 5y agoIf someone can get past the 2 layers of auth to see my OTPs, they can figure out the couple of usernames I use. Hell, I’m probably logged into everything anyway.
- ggm 5y agoyou can scan QR codes from PNG on unix. There's several commandline tools to extract the contents. The handwaving about phones is handwaving. use a real camera, use a pi with a camera, steal the QR code and photocopy it and do things in a cleanroom, screengrab on your laptop.. there is a huge list.