Collaborate Disseminate
The USPTO has two-step authentication: recommended applications comprise:
Google Authenticator
Microsoft Authenticator
Oracle Authenticator
Assume that I use my Gmail address as the USPTO username. What considerations / … Continue reading What security considerations should be made when choosing a universal authenticator app?
I would like to move away from SMS 2FA (because of Should 2FA over SMS be considered insecure in the wake of recent SS7 attacks? for example).
But some services that provide Authenticator apps actually provide fallbacks mech… Continue reading What point in Authenticator App 2FA when SMS fallback is enabled
I am currently using a tomcat authenticator implementation (https://github.com/boylesoftware/tomcat-oidcauth). The authenticator is implemented as a tomcat valve. This implementation still requires a realm to be used, which i… Continue reading Tomcat OIDC Authenticated Realm
My Google Titan security key has both USB and NFC interfaces, and I’m able to use it via NFC on my Android phone. However, my laptop also has an NFC reader, and it doesn’t seem to work out of the box. The laptop makes NFC noi… Continue reading Is there any way to use my Titan security key via NFC on my laptop, instead of USB? [migrated]
Looking at the online resources regarding WebAuthn, I still haven’t been able to figure out which of the involved components (or parties) that store the link between the user and his/her authenticator device.
I borrowed this… Continue reading Which party stores the link between user and device in WebAuthn?
Google authenticator uses HOTP and TOTP algorithm for TFA.
What is the basic working principle of DUO push? What brings security to DUO push?
Continue reading How does DUO push button method and other methods actually work?
Background :
Recently quora got breached and database were reported to be stolen, Myself used to have a habit of signing in through google login.
Problem statement :
What were the possible impacts when i sign in thr… Continue reading what were the impacts when a user affected with data breach when he signed up with third party authentication
I do not know my key code for setting up Authenticator on my new phone and that is blocking me from using my Square point of sale app. What should I do?
Continue reading I do not know my key code for setting up Authenticator on my new phone [on hold]
As everyone knows, SE has had this feature where one login from one network, she/he logs in globally across all SE networks. This is done of course using local storage.
I however want to login using server-to-server token. … Continue reading Token-based server-to-server authentication of clients
I got a new phone and I don’t have my GA secret key to restore the app. Is there a way to get this? I am at a total loss here. I don’t know where I put the key. Am I SOL?