rysiek ✅: "So birbsite still does not support hardware token…" - Mastodon

rysiek ✅ is a user on mastodon.social. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.

rysiek ✅ @rysiek

So birbsite still does not support hardware tokens (like YubiKeys) for #2FA. Bleh.

Speaking of which...
Looking at you too, Mastodon. 👀

Apr 03, 2018, 14:20 · Web · 2 · 7

@rysiek This feels like something we could hack together if you'd be interested. :)

#openSourceAsHell

@nicseltzer haha, I knew this would come back to bite me immediately...

But challenge accepted! This weekend?

@rysiek I'll be here with bells on.

@nicseltzer @rysiek as a reference: https://github.com/tootsuite/mastodon/issues/562

@moritzheiber @rysiek Thanks for the lead. :)

@nicseltzer @rysiek 🤗

@rysiek I need to find time to work on this

@rysiek at least mastodon supports totp. birdsite has only sms based 2fa

@waldfee nope, birbsite implemented totp lately.

@rysiek ah thx. good to know

@rysiek @waldfee where? I haven't seen it yet..

@lx @waldfee go to birbsite, go to your security settings. Somewhere there, I helped a user set it up lately. I do not have a birbsite account so I cannot take screenshots.

But I remember they annoyingly called it something completely random.

As one does.

🙄

@rysiek @waldfee do you have to set up a phone number for that even if you want TOTP? Because I don't have one and every other option pane there had nothing about TOTP.. 🤔

@lx @waldfee yeah, you might have to. It's dumb. But hey, it's birbsite, so.

@rysiek @lx yeah that's pretty nonsensical. they just want your phone# i guess

@rysiek i use my yubikey with the authenticator, but from what i gather, this basically just kinda fakes google-auth?