/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

barrypopik.com
| | feeding.cloud.geek.nz

[AI summary] This article discusses the current state of TOTP two-factor authentication in 2025, highlighting interoperability issues and security considerations with various authenticator apps.
3.5 parsecs

Travel
| |
| | sts10.github.io

This is a continuation of my post on enabling two-factor authentication for Mastodon accounts. For users new to two-factor authentication, I highly recommend you start there. Recent versions of Mastodon allow you to add a security key as an alternate form of a second factor. What's a security key? Basically,...
3.4 parsecs

Travel
| |
| | www.sethvargo.com

With many popular websites providing two factor authentication, why shouldn't you add two-factor authentication to SSH? Public-key, Private-key encryption is generally considered to be very secure, but why not take an extra step?
3.8 parsecs

Travel
| |
| | rcoh.me

I always wondered how Google Authenticator style 2-factor codes worked. The process of going from QR code to rotating 6-digit pin seemed a bit magical. A few days ago, my curiosity found itself coupled with some free time. Here's what I found: What's in the QR Code I scanned the QR code from Github with a barcode scanning app. Here's what's inside: otpauth://totp/Github:rcoh?secret=onswg4tforrw6zdf&issuer=Github Not too surprising. It tells us the protocol, TOTP, who is issuing this OTP code (Github), and most importantly the secret:1
24.7 parsecs

Travel
|