3 ms·

Going digital detox but still want that sweet 2FA? My J2ME vintage feature phone HOTP/TOTP app has you covered. https://github.com/baumschubser/hotpants https:/

Going digital detox but still want that sweet 2FA? My J2ME vintage feature phone HOTP/TOTP app has you covered. https://github.com/baumschubser/hotpants https://github.com/baumschubser/hotpants

10729287 3y ago
This is awesome. Especially for businesses that need to share a 2FA device between members for occasional uses. This is our case and the good old Iphone 7 we use for that is always battery empty when we need it !
navigate8310 3y ago
Thank you for sharing, this will come in handy at my workplace.
systemtest 3y ago
What if something happens to the phone?
- detrites 3y ago
  You backed up the key.
  - systemtest 3y ago
    That is good to hear. I was under the impression that with TOTP you could only initialise once.
    - detrites 3y ago
      It can depend on the vendors implementation, but usually they will provide the key in some readable form for the purposes of backup. If they don't, but do use QR codes, screen grabbing the QR code may work for the purpose. It is possible however that a vendor can choose to obfuscate the key in an app or through some other method. Technically it's in there somewhere, but may be hard to extract. In the case of this phone however the only way in is to have a key.
    - prmoustache 3y ago
      For many services you can onboard more than one device. I have one old laptop staying at home that just does that, being used as secondary 2fa device. It won't help me much if I lose my phone while abroad on holidays but if I am close to home this is no big deal. Most services still allows you to use email or sms as other 2FA anyway.
    - xaduha 3y ago
      You can save QR code as a file and initialize as many devices with it as you want. And by devices I mean proper smart cards personally, not old phones, but whatever floats your boat. This https://developers.yubico.com/ykneo-oath/Releases https://developers.yubico.com/ykneo-oath/Releases installed on a java card (cheaper than a yubikey) is perfectly usable with Yubico Authenticator on a modern smartphone over contactless interface.
- prmoustache 3y ago
  you replace it?
jai_ 3y ago
This is something that's really similar to what I want. Ideally I would like a standalone device to display TOTP codes, but the only devices I've found only have a support for a single code. I guess a feature phone with a custom app is the next best thing.

Going digital detox but still want that sweet 2FA? My J2ME vintage feature phone HOTP/TOTP app has you covered. https://github.com/baumschubser/hotpants https://github.com/baumschubser/hotpants

10729287 3y ago

This is awesome. Especially for businesses that need to share a 2FA device between members for occasional uses. This is our case and the good old Iphone 7 we use for that is always battery empty when we need it !

navigate8310 3y ago

Thank you for sharing, this will come in handy at my workplace.

systemtest 3y ago

What if something happens to the phone?

detrites 3y ago
You backed up the key.
- systemtest 3y ago
  That is good to hear. I was under the impression that with TOTP you could only initialise once.
  - detrites 3y ago
    It can depend on the vendors implementation, but usually they will provide the key in some readable form for the purposes of backup. If they don't, but do use QR codes, screen grabbing the QR code may work for the purpose. It is possible however that a vendor can choose to obfuscate the key in an app or through some other method. Technically it's in there somewhere, but may be hard to extract. In the case of this phone however the only way in is to have a key.
  - prmoustache 3y ago
    For many services you can onboard more than one device. I have one old laptop staying at home that just does that, being used as secondary 2fa device. It won't help me much if I lose my phone while abroad on holidays but if I am close to home this is no big deal. Most services still allows you to use email or sms as other 2FA anyway.
  - xaduha 3y ago
    You can save QR code as a file and initialize as many devices with it as you want. And by devices I mean proper smart cards personally, not old phones, but whatever floats your boat. This https://developers.yubico.com/ykneo-oath/Releases https://developers.yubico.com/ykneo-oath/Releases installed on a java card (cheaper than a yubikey) is perfectly usable with Yubico Authenticator on a modern smartphone over contactless interface.
prmoustache 3y ago
you replace it?

jai_ 3y ago

This is something that's really similar to what I want. Ideally I would like a standalone device to display TOTP codes, but the only devices I've found only have a support for a single code. I guess a feature phone with a custom app is the next best thing.