3 ms·

TOTP (time-based authentication codes) is an open RFC standard and you can run two-factor application on any device. This includes - Desktop applications - We

TOTP (time-based authentication codes) is an open RFC standard and you can run two-factor application on any device. This includes - Desktop applications - Web browsers - Raspberry Pi / Uncommon Linux installations The actual source code to generate TOTP tokens is some thousands lines of Python - not that much.

eesmith 4y ago
The GitHub documentation doesn't explain how to set it up. It only mentions TOTP apps in a smart phone.
- miohtama 4y ago
  I suggest you try "TOTP applications" in Google. There are hundreds of alternatives and it is not difficult to find one.
  - eesmith 4y ago
    1) If something is a TOTP application, does that mean it works with every TOTP application? I know that not all web sites work in all browsers, and not all USB-C cables work for every situation (and most SOAP servers seemingly didn't interoperate at all). I don't know and that search won't tell me. 2) Does GitHub focus on mobile phones because that hardware provides a unique id or some other feature that isn't available from other platforms? I don't know, and that search won't tell me. 3) I did that search just now, and the top links from Google were almost all for mobile (or paid ads). The main exception was https://en.wikipedia.org/wiki/Comparison_of_OTP_applications https://en.wikipedia.org/wiki/Comparison_of_OTP_applications . 4) I start going through the list and see monthly fees, freemium model, one time payment license, and required hardware purchases. While others here pointed out a number of free solutions with licenses I'm already familiar with. The Paradox of Choice is not my friend.
    - miohtama 4y ago
      This is HackerNews so I have higher than average expection of how hackery people here are. If you are in doubt I suggest user forums like SuperUser.com and Reddit.
      - eesmith 4y ago
        Ahh, so your earlier suggestion was offered in the sarcastic RTFM sense? If so, the sarcasm went over my head. I meant my response to be taken as serious user feedback to what I thought was a serious response. Back in the mid-1990s, I made a comment somewhat along those lines. I was correctly chided for the having the mistaken understanding that just because someone knows many nerdy fields, that doesn't mean they know all nerdy topics. I have tried to bear that in mind since.

eesmith 4y ago

The GitHub documentation doesn't explain how to set it up. It only mentions TOTP apps in a smart phone.

miohtama 4y ago
I suggest you try "TOTP applications" in Google. There are hundreds of alternatives and it is not difficult to find one.
- eesmith 4y ago
  1) If something is a TOTP application, does that mean it works with every TOTP application? I know that not all web sites work in all browsers, and not all USB-C cables work for every situation (and most SOAP servers seemingly didn't interoperate at all). I don't know and that search won't tell me. 2) Does GitHub focus on mobile phones because that hardware provides a unique id or some other feature that isn't available from other platforms? I don't know, and that search won't tell me. 3) I did that search just now, and the top links from Google were almost all for mobile (or paid ads). The main exception was https://en.wikipedia.org/wiki/Comparison_of_OTP_applications https://en.wikipedia.org/wiki/Comparison_of_OTP_applications . 4) I start going through the list and see monthly fees, freemium model, one time payment license, and required hardware purchases. While others here pointed out a number of free solutions with licenses I'm already familiar with. The Paradox of Choice is not my friend.
  - miohtama 4y ago
    This is HackerNews so I have higher than average expection of how hackery people here are. If you are in doubt I suggest user forums like SuperUser.com and Reddit.
    - eesmith 4y ago
      Ahh, so your earlier suggestion was offered in the sarcastic RTFM sense? If so, the sarcasm went over my head. I meant my response to be taken as serious user feedback to what I thought was a serious response. Back in the mid-1990s, I made a comment somewhat along those lines. I was correctly chided for the having the mistaken understanding that just because someone knows many nerdy fields, that doesn't mean they know all nerdy topics. I have tried to bear that in mind since.