2fa | Two-factor authentication on the command line | Authentication library
kandi X-RAY | 2fa Summary
kandi X-RAY | 2fa Summary
2fa is a two-factor authentication agent. 2fa -add name adds a new key to the 2fa keychain with the given name. It prints a prompt to standard error and reads a two-factor key from standard input. Two-factor keys are short case-insensitive strings of letters A-Z and digits 2-7. By default the new key generates time-based (TOTP) authentication codes; the -hotp flag makes the new key generate counter-based (HOTP) codes instead. By default the new key generates 6-digit codes; the -7 and -8 flags select 7- and 8-digit codes instead. 2fa -list lists the names of all the keys in the keychain. 2fa name prints a two-factor authentication code from the key with the given name. If -clip is specified, 2fa also copies to the code to the system clipboard. With no arguments, 2fa prints two-factor authentication codes from all known time-based keys. The default time-based authentication codes are derived from a hash of the key and the current time, so it is important that the system clock have at least one-minute accuracy. The keychain is stored unencrypted in the text file $HOME/.2fa.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of 2fa
2fa Key Features
2fa Examples and Code Snippets
Community Discussions
Trending Discussions on 2fa
QUESTION
Secret of Time-based One Time Password are usually 16-byte base32 encoded string. e.g. GitHub 2FA.
But for some scenario, it has 26 bytes long. e.g. Tutanota OTP. Often in lower case with whitespaces, like: vev2 qjea un45 3sr4 q4h3 ais4 ci
I tried with the TOTP algorithm implemented in dgryski/dgoogauth and tilaklodha/google-authenticator. Both can handle 16-byte secret well, but got error for 26-byte secret.
e.g. for 16-byte secret VEV2QJEAUN453SR4
:
ANSWER
Answered 2022-Apr-02 at 04:15A base32 encodes every 5 bits of input bytes into base32 character, go base32 use The RFC 4648 Base 32 alphabet (A-Z, 2-7). When decode a string to bytes, each base32 character input will be mapped to a 5 bit index then recompose to bytes.
In your example "VEV2QJEAUN453SR4Q4H3AIS4CI", the previous "VEV2QJEAUN453SR4" was already valid input, it is a 16 char input, and 5 bit * 16 is 80 bit so it can be resolved into 10 bytes output. Now let us just look at the rest "Q4H3AIS4CI", 10 char -> 5 * 10 = 50 bits, the previous 40 bits can be decode to 5 bytes, but the last 2 char "CI" leads 2 bit remainder
QUESTION
I worked on setting up 2FA while doing ssh in EC2 instance. But after the setup instance is still not asking for 2FA code and directly logs my user i.e. ubuntu
into the server.
I did following steps to setup 2FA:
Install Google Authenticator PAM module.
sudo apt install libpam-google-authenticator
Add
auth required pam_google_authenticator.so
to/etc/pam.d/sshd
Restart ssh
sudo systemctl restart sshd.service
Update sshd_config with following:
ChallengeResponseAuthentication yes PasswordAuthentication no
Run command
google-authenticator
Please help me resolve this issue. Thanks in advance.
...ANSWER
Answered 2022-Mar-31 at 11:03I was facing this issue because of other configuration was enabled. PubKeyAuthentication was used instead of authenticator. I change it to PubKeyAuthentication no
which resolved the issue.
QUESTION
I have a application build with .NET Core. This application is very simple, but the problem is that I have to integrate a 2FA app (PingId) for double security instead of one simple Login. I am guided to use SAML, for building bridges between Service Provider and Identity Provider. I have found some solutions online, and one of them that is open source is itfoxtec.identity.saml2.
What I want to know is that, is there anyone who can clear the way how this works? I mean I cannot understand some url in appsetting.json
file.
Here is a demo of this file:
https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2/blob/master/test/TestWebAppCore/appsettings.json
For example IdPMetadata
key is a xml file that has to be provided by Identity Provider administrator?
SigningCertificateFile
is a generated certificate by my Service Provider app or is something builded inside the application, if that is how to generate it?
ANSWER
Answered 2022-Mar-30 at 19:38Yes, the identity provider (IdP) should expose a SAML 2.0 metadata endpoint, the URL is added in the IdPMetadata
.
The TestIdPCore sample is for testing the samples and to show how to implement a SAML 2.0 based IdP.
Your application (relaying party RP) needs a certificate, which is e.g., added as a file in SigningCertificateFile
.
QUESTION
I have the following scenario. Currently a Wordpress site was hosted on an EC2
server. There is no deployment strategy in place. It was using the AWS CLI to
deploy the data from local to the server.
Problem For various reasons, I don't want to take it over that way of deployment and am
currently considering putting the deployment process into a GitHub Action. Which
in itself wouldn't be a problem if it weren't for the 2FA
check.
Using the AWS CLI
, I am forced to enter the code displayed in my MS Authenticator
app into the CLI to proceed.
Question: Is it possible to deploy via GitHub Action and 2FA? I guess almost no? But what do I know?
...ANSWER
Answered 2022-Mar-15 at 22:17No, you can't have GitHub Actions prompt and enter the 2FA tokens on your behalf. But what you can do, is setup OpenID Connect between GitHub actions and AWS.
That way you can authorize GitHub Actions to make changes to specific resources in AWS and OIDC handles the magic key exchange parts to make sure it can safely do its thing.
More info here:
QUESTION
I know it invokes different Lambda instances for different routes (like connect, disconnect, default, etc) on the Websocket API. But what happens for different messages on the same route, does it keep the Lambda instance running for new messages until disconnect?
Let's say, I am building a login form with 2FA. I take username, password and process it, and then I want the 2FA code from client. Can I do this with a single Lambda instance?
...ANSWER
Answered 2022-Feb-15 at 09:36As commenter deceze
wrote:
You can never assume that a single Lambda instance will process a request.
The point of serverless is that you don not manage the servers. Amazon does. And they can and will start new instances of your Lambda, terminate existing instances etc.
So if you need "cross invocation persistence", you need to solve this in a different way. One common way is to use DynamoDB or depending on the use cases ElastiCache, S3, EFS etc.
QUESTION
In the Near, transactions signed by a 2FA-protected wallet are done in a special way (contract confirmation) and are not like regular transactions. Signer and receiver id the same wallet. Sample transaction: https://explorer.near.org/transactions/9uPvkdmcL4iNnWrHXZocf7NLAJUUVa4zSMrtFtJhrjcY
How to work with them properly, where to find them in Indexer? How do I get the data correctly, what contract and method the user signs?
...ANSWER
Answered 2022-Feb-08 at 18:09NEAR Indexer for Explorer core contributor and maintainer here.
Looking at the transaction you've provided in your question https://explorer.near.org/transactions/9uPvkdmcL4iNnWrHXZocf7NLAJUUVa4zSMrtFtJhrjcY it was a FUNCTION CALL
of the method confirm
And I believe your concern is that you cannot see the result of your transaction in the public NEAR Indexer for Explorer database by querying the transactions
table with the hash.
And by saying that 2FA transactions "are not like regular transactions" you mean the nature of cross-contract calls involved.
Here's how to find out what is happening
- First of all, let's look for your initial transaction and the Receipt ID it was converted to.
QUESTION
I haven't used Google Cloud in years and today I've logged in and I've found that there are several projects in https://console.firebase.google.com/u/0/
and https://console.cloud.google.com/cloud-resource-manager?organizationId=0&authuser=0 that I didn't create.
I'm not the owner of those projects and I can't do anything with them.
What can I do to clean this up?
My GMail account is protected with 2FA, how did they managed to create these projects?
Any hint about where to look for help would be great as Google doesn't seem to care unless I pay for a support plan.
...ANSWER
Answered 2022-Jan-14 at 22:11Most likely you do not have a problem.
You can be a member of a project thru Google Groups and other methods.
To double-check, go to your Google Cloud Billing Account. There you can see the projects that you are responsible for. If the project is not listed there, then you are not paying for the project.
If there is a project that you do not know about connected to your billing account, immediately contact Google Cloud Billing Support which is free.
QUESTION
Searching for an answer to this finds a lot about GitHub credentials but nothing on this specific issue. I am starting to work with the PowerShell (PoSH) Cmdlet 'Get-Credential' because my company uses Two-factor Authentication (2FA), so a username/password won't work to remote from my desktop (user account) to a server (Admin account). Additionally, I have just started using VS Code. The issue is that when running a simple PoSH snippet, in PoSH ISE using Get-Credential I get a popup that lets me select the certificate that I need and then enter a Pin. When I run this same snippet in VS Code, the popup never appears. Does anyone understand why this is, and can I resolve it?
Here is the snippet for reference.
...ANSWER
Answered 2022-Jan-03 at 19:14You can show or hide the terminal from the "view" menu or using
QUESTION
When I on a form and the focus is on the phone number field, iPhone will sometime suggest my phone number just above the keyboard. Like in the image below.
I am trying to implement this functionality via inputmode
and type=tel
,
ANSWER
Answered 2021-Dec-29 at 18:09Have you tried enabling/disabling autocomplete on the input?
QUESTION
How to use custom colors to obtain split violin plots like this: image source
the standard examples only show 2 colors using up the hue
parameter.
ANSWER
Answered 2021-Dec-22 at 13:03Seaborn only supports 2 hue values for split violins. You'll need to loop through the created violins and change their color.
Here is an example:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install 2fa
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page