While I love the idea of #passkeys I continue to find the ecosystem of them too siloed. #sms#2fa continues to grow among the stupid, like governments and banks. Meanwhile, my Android #totp#Authenticator app has more entries than I can easily count. Finding the right now... difficult. Will it even sort alphabetically? Or by MRU? Or??? I wonder what alternative apps exist.
It's like most people dependent on smartphones for #2FA logins everywhere, but much worse. Smartphone usually has one #authenticator app, everything visible in one place, Yubikeys have various modules inside and I use most of it for many different things.
Authenticator part here is the easiest one, at least I have nice list of accounts/services to display with one simple command. But I have to remember U2F enabled services myself... Or check how many files I encrypted with GPG, or where I could use ssh keys...
Oh, and I use also pam-u2f and have FIDO LUKS login configured...
:blobCat_anxious_sweat:
Seriously, user could become even more dependent in more complex ways...
Why the hell these things don't just support firmware updates?!
#DecRecs Day 1 - Let's start easy with some QTBIPOC books I enjoyed this year:
All This Could Be Different by Sarah Thankam Mathews - realistic fiction about a young Indian lesbian starting a suspicious consulting job and just trying to get over her shitty self while navigating family and friendship
Gods of Want by K-Ming Chang - excellent series of Taiwanese diasporic short stories full of intergenerational angst and ghosts that haunt us, be it from the margins or right up in our faces
Roar of the Lambs by Jamison Shea - yet another excellent YA novel starring a duo intertwined by events set forth in their families decades before, a Black seer who just wants to get to get out of this town and a mixed nonbinary teen who always stands up for what is right - both of whom only ever face doubt and distrust by others
Sister Snake by Amanda Lee Koe - an homage to chinese folklore brought into the modern lore, two sisters, both of whom can take forms of both human or snake, fall back into one another's lives. one raging in their chaos, another just trying to fit in.
I've been using Bitwarden as my password manager since 2021. I recommend that any student that is using an .edu email that they might lose access to in the future use a manager to keep track of accounts that they might need to change access from. I periodically go through my passwords and sort them into folders, descriptive titles, and delete unused accounts.
I recently switched to Ente Auth as my 2FA. I thought that I needed to always have Google and Microsoft's proprietary authentication apps - turns out I was able to add them to a different service super easily. Ente is multi-platform so it doesn't have to be only on your phone. Now if I could only get Steam to let me use a different app...
I find that these were great free options and have been easy to use. Both of these have a 0 data policy so if you lose access to your account, that's it- they can't restore it for you because they literally don't have that data. It's important to think about how you might want to back it up outside of the service.
Saw some post about migrating #authenticator apps... and I realised I never used Google app for example. Because when I started configuring #2FA, I already had #Yubikeys :blobcatpeek2:
So I naturally downloaded their Yubico Authenticator to use something I could use, without even thinking. And this was/is my first #OTP app I ever used.
I tried FreeOTP or something similar when it was recommended for some work thing in previous job, but never had a chance to really "feel" that because I changed jobs shortly after.
And now I thought for the first time that my only experience with OTP is when codes aren't device-locked... :blobcatgiggle:
And for me it's absolutely natural state, as things should be.