Re: [PLUG] The content you thought you made is not yours - (was: You thought you bought software – all you bought was a lie)

[JP Vossen via plug <plug@lists.phillylinux.org>]

On 10/7/22 23:30, PaulNM via plug wrote:
> On 10/7/22 01:09, Steve Litt via plug wrote:
> > On Thu, 2022-10-06 at 13:28 -0700, Syeed Ali via plug wrote:
> > > The company, your internet provider, government, someone else's
> > > government, social credit score.. whatever, could take your work away.
> > > I know someone who has been locked out of an account because he changed
> > > phone numbers and so two factor authentication won't work.. whoops.
> >
> > I worry about stuff like that. So far I've stayed away from 2 factor authentication.
>
> I stayed away from multi-factor for a long, long time because of stupid implementations that required a working phone. Phones die, people! How can I order a new phone if I need a functioning phone to do so?
>
> Fortunately that's not the case anymore. I currently use Bitwarden and Authy for password and MFA TOTP management. Both securely allow you to use either or both computers and phones/tablets. There are other options available as well.

Yes!  All of that.  Plus too much of that stuff is in or heading for "the cloud."  That's why I love that KeePass can do it locally, all by itself.

* https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm
* https://en.wikipedia.org/wiki/HOTP (HMAC-based one-time password)
* https://keepassxc.org/docs/#faq-security-totp
    * https://www.linux.org/threads/in-depth-tutorial-how-to-set-up-2fa-totp-with-keepassxc-aegis-and-authy.36577/
* It works in KeePassDX (Android, F-Droid or Play) too, you just have to scroll down past notes

Later,
JP
--  -------------------------------------------------------------------
JP Vossen, CISSP | http://www.jpsdomain.org/ | http://bashcookbook.com/
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug