TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Show HN: Open2FA – a CLI 2FA tool with optional secure remote capabilities

6 点作者 d-cc超过 1 年前
This is a tool I started working on whenever pypi decided to make 2FA mandatory. I&#x27;ve already been using it to login to pypi for a while, but only finished the remote capabilities recently.<p>It can be installed by simply running: `pip install open2fa`<p>Any secrets that are stored remotely are encrypted, so the person running the api (me) provably cannot use any remotely stored secrets.<p>It&#x27;s possible to use pushed TOTP secrets from any device with the open2fa CLI installed, as long as the original UUID is known.<p>It&#x27;s also possible to use any pushed secrets to generate 2FA codes from any device with a web browser, if one is willing to accept the inherent risks involved when doing so and th original UUID is known (as it is used to generate the Open2FA ID&#x2F;Secret). I attempted to make this as secure as possible by avoiding the use of any 3rd party dependencies in the javascript, all the functionality related to generating 2FA codes from encrypted secrets in the webUI uses vanilla javascript. That being said, there are some risks that cannot ever be fully alleviated, if one needs to take their security seriously, they should avoid generating 2FA codes using the web tool. More information as to how this works can be found at:<p><a href="https:&#x2F;&#x2F;open2fa.liberfy.ai" rel="nofollow">https:&#x2F;&#x2F;open2fa.liberfy.ai</a> | webui&#x2F;api&#x2F;explanation of remote capabilities<p><a href="https:&#x2F;&#x2F;github.com&#x2F;cc-d&#x2F;open2fa&#x2F;">https:&#x2F;&#x2F;github.com&#x2F;cc-d&#x2F;open2fa&#x2F;</a> | the CLI repo<p><a href="https:&#x2F;&#x2F;github.com&#x2F;cc-d&#x2F;open2fa-server">https:&#x2F;&#x2F;github.com&#x2F;cc-d&#x2F;open2fa-server</a> | the webui&#x2F;api repo

暂无评论

暂无评论