Scott Williams

As far as I understand, for YubiKey, only the TOTP secret is kept on the key and an app (yubico authenticator) takes that token and generates a code based on...

Of course the app gets the secret. It can't generate a code without it. Google authenticator and others store the secret directly in the app (and last pass auth, and...

@My1 You seem to be conflating the YubiKey and Yubico Authenticator. The former is the hardware that stores the secret, the latter is what generates the code. The YubiKey passes...

Cool. Most TOTP apps (Authy, LastPass Auth, Google Authenticator, etc.) store the actual secret in the app data itself. Authy goes a step further and can encrypt and store the...

It would also be helpful to have a means of retrieving the codes by mobile app, especially since mobile apps are the most common method for TOTP. If we knew...

@sbrl Since the cli is python, would should be able to just use datetime.now() https://docs.python.org/3/library/datetime.html#datetime.datetime.now

"Not to be too blunt about it, but if you're super paranoid about running untrusted software (or software with 'weak' signatures) you're probably not using containers, right?" It's more complicated...

> I'm not sure anyone is using CentOS 9 Stream in production, Yes, we are, with k3s for several months now, and it's actually been working great. This recent upgrade...

Steam 8 is definitely not Stream 9 and if it's broken there, it is soon to be in RHEL, AlmaLinux, and Rocky. CentOS Stream just did you a favor in...

This is now fixed for me. I upgraded to 1.23.8 on CentOS Stream 9 normally with the regular update script today without any workarounds.