Explore >> Select a destination


You are here

www.mjt.me.uk
| | www.dannyguo.com
13.4 parsecs away

Travel
| |
| | rcoh.me
12.1 parsecs away

Travel
| | I always wondered how Google Authenticator style 2-factor codes worked. The process of going from QR code to rotating 6-digit pin seemed a bit magical. A few days ago, my curiosity found itself coupled with some free time. Here's what I found: What's in the QR Code I scanned the QR code from Github with a barcode scanning app. Here's what's inside: otpauth://totp/Github:rcoh?secret=onswg4tforrw6zdf&issuer=Github Not too surprising. It tells us the protocol, TOTP, who is issuing this OTP code (Github), and most importantly the secret:1
| | labanskoller.se
10.3 parsecs away

Travel
| | Last week my favorite IT security podcast Bli säker (Become Secure in English) published the episode The Epochalypse and the QR Code (only in Swedish) where they explained the techonology behind mobile authenticator apps. I felt I needed to refresh my TOTP algorithm support investigation from 2019 before the recording of the next episode of the Bli säker podcast. :) So this is an update to the blog post I published in July 2019 called Many Common Mobile Authenticator Apps Accept QR Codes for Modes They D...
| | www.garron.me
76.8 parsecs away

Travel
| How to install Wallabag on Ubuntu Linux with Nginx and SQLite