Is this some sort of a convenience feature hidden behind a paywall to justify purchasing their subscriptions or does generating the codes actually cost money? If the latter is the case, how do applications like Aegis do it free of cost?
You must log in or register to comment.
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 57 users / day
- 383 users / week
- 1.5K users / month
- 5.7K users / 6 months
- 1 subscriber
- 2.97K Posts
- 74.6K Comments
- Modlog
At this point, it really depends on implementation, and the exploit.
It the exploit can get both in one go, I’d argue that it’s technically 1FA. Else, no matter how trivial it to do both steps, it’s 2FA. But then it pushes the question back to “what is a go at it”? A script? A remote file copy? Etc.
Kinda important technicality in my view, as separating them in the password management process is the first requirement to actually have two factors.
However, using two apps instead of two parts of the same app isn’t much of an improvement. If the device is compromised, it doesn’t matter much how many apps you split the data into. You can always use different passphrases, no biometrics, etc, but at that point, it’s so inconvenient that you’re just better off carrying two devices…
The point I’m making here is: 2FA were originally supposed to be actually separated (other, offline device). However, for various reasons (cost, adoption, convenience, etc), apps were pushed instead. Now we have a regression where, in most cases, 2FA or MFA are often just a “single factor authentication with extra steps”. As a matter of fact, true MFA was the main criteria when I selected my bank. And the day they force an app on me is the day I change banks.