#2 factor authentication

[spaceshipsandpurpledrank]

[majesticaldiscomfort]

Fun fact: If you use Inspect Element on Elon Musk's Twitter page, you'll find that he actually doesn't have 2FA enabled.

Based on this tech website I found with a quick Google search, apparently Twitter still uses plaintext passwords. Which means...

*drumroll*

Literally any of us, theoretically, could hack Elon Musk's Twitter account at any time.

I won't do it myself because I can't afford a proper VPN, but if any of you tech savvy Tumblrites out there want to make the world laugh out loud by stealing his account and spamming "trans-rights" absolutely everywhere, by all means (PLEASE) do it.

Bonus points if you change his password and then share the new one on your Tumblr page, so that everyone else can log in and also cause chaos.

[plasmalink]

Unfair that two factor authentication makes you get out your phone when you do things on the computer. They should make some where you have to go on the computer when you do something on your phone

[idknikkip]

I hate you two factor authentication!!!! People should be able to access accounts without smartphones!! there are so many people that this keeps from accessing things they need!! I can think of like 50 different groups of people this hinders accessibility for; the elderly who have issues with technology, the homeless logging onto accounts at the public library, those who may not have access to a phone because of abuse poverty or incarceration, or just plain dumbasses like me who lose or misplace or break their phones (I've somehow done all 3 this summer)

like ... bro I dont have the nuclear codes, do we need this level of security?????

[odinsblog]

A social media company is charging money for a basic security measure like a two factor authentication.

Thanks to the “genius” “businessman,” Elon Musk, your Twitter account’s safety will be locked behind a paywall.

“Sorry your account got hacked, but you should have paid Elon Musk extra for basic security.”

If you’re still on Twitter, here’s how to do it Elon’s way…

[frostgears]

the North American Industry Association for Dreams would like to remind you that while achievements, money, and experience points earned in dreams do not transfer to the waking world, they may be available in future dreamworld iterations. keep coming back!

please keep your account contents safe and secure by setting up two-factor authentication: for example, your password, plus a secret fire burning within your imagination, of which the barest glimmer is visible in the sparkle in your eyes when someone asks "hey, whatcha thinkin' about?"

our employees and the employees of our member corporations will not ask for your password or second factor. take care not to lose your secret fire, as your dreamworld will then become inaccessible and you will have to create a new one.

[audley-and-cherry]

To anyone still hanging around Twitter- 2FA has been disabled. You can log out and request a code to log back in, but all that happens is a message pops up that says "can't send the confirmation code right now. Try again later".

Things are going great over on the birdsite.

[ardenasaservice]

using your flipper as a totp token

About

Thanks to Alexander Kopachov for publishing this application for use.

Repo is on github.

You can use a flipper zero anywhere you can use software authenticators such as Authy or Google Authenticator. The process for signup varies depending on the service you want to implement the token for, but as long as it can provide you a secret (not just a QR code), you can use this method as a "software token". You can look up your timezone offest at https://www.timeanddate.com/time/map/

Installation

If you don't already have the app installed on your flipper device, you can do so by:

navigating to the latest release

download the fap that corresponds with your firmware (as of writing, only the official and unleashed firmware are supported)

using qFlipper, upload the file to the SD Card/apps directory

Setup

Open the Authenticator application on your Flipper

Upon start, a config file will be created at SD Card/authenticator/totp.conf

Download the config file, and open in your preferred text editor:

Edit the following fields, substituting values as appropriate:

Timezone: -6.0000 #Your timezone offset. Do not add a plus sign for positive values. This example is for central time. TokenSecret: ABCDEFGHJ2JDJ4MFKAL2J4LKXWHATEVER #The secret from your service. Remove all spaces from the output. When Authenticator reads this for the first time, it will encrypt the value for you. TokenAlgo: sha1 #Most services default to sha1. If the generated tokens don't work, try sha256 or sha512.

Save the file, and upload it the flipper at SD Card/authenticator/totp.conf

If all done correctly, you should now be able to log in with your new token! Make sure to save the emergency password your service provides you in case you run into issues.