"Critical" projects and volunteer maintainers [LWN.net]

"Critical" projects and volunteer maintainers

Posted Aug 3, 2022 15:03 UTC (Wed) by LtWorf (subscriber, #124958)
In reply to: "Critical" projects and volunteer maintainers by atnot
Parent article: "Critical" projects and volunteer maintainers

> I have personally never owned or had the desire to own one, does this really disqualify me from having a popular PyPI library now?

It disqualifies you from receiving the USB tokens from google. They are only shipped to a very very small list of countries (Austria, Belgium, Canada, France, Germany, Italy, Japan, Spain, Switzerland, UK, USA).

Everyone else must set up 2FA with an authenticator app on the phone.

I plan to try and save the seed and use oathtool to generate the code.

"Critical" projects and volunteer maintainers

Posted Aug 4, 2022 3:37 UTC (Thu) by pabs (subscriber, #43278) [Link]

If you are using the 'pass' password manager, there is an pass-otp extension for OTP secrets and the Browserpass web extension has support for both plain pass secrets and and pass-otp OTP secrets. Extracting the OTP seeds from QR codes is possible using other software, although most TOTP supporting sites give you the secret in plain text initially.

https://github.com/tadfisher/pass-otp
https://github.com/browserpass/

"Critical" projects and volunteer maintainers

Posted Aug 4, 2022 6:12 UTC (Thu) by jem (subscriber, #24231) [Link]

What's the problem? Google is a big company which has a functioning web store selling lots of hardware all over the world. So why not this item?

Oh well, there are always competing security keys like the YubiKey.