Viewing profile — PranavBerry

Location: India Remote: Yes Willing to relocate: No (can work remotely according to another time zone) Technologies: Python (FastAPI, Flask, Django) JavaScript/TypeScript (React, R…

Remote: Yes Willing to relocate: No (but can work remotely according to another time zone) Technologies: JavaScript/TypeScript (React, React Native, Node.js) Python (FastAPI, Flask…

Location: India Remote: Yes Willing to relocate: No (but can work remotely according to another time zone) Technologies: JavaScript/TypeScript (React, React Native, Node.js) Python…

>If I'm a common person with one phone I had not thought about that but I think I can add push notifications if this is a problem. So on your phone you just tap the login with my a…

> plug my Yubikey into as many laptops as I would like. What if you don't own a physical key? > I have to trust you to not leak my 2FA. Authy does this already and so I don’t use A…

>Is your service going to be audited by independent third parties that vendors choose? Yes I am planning to do that. >How do people verify that your application is the legitimate v…

> FIDO Alliance is doing with WebAuthn Yes I looked into it, but it looks like WebAuthn does not support multiple devices (let me know if I am wrong). What if I want to login from …

>intercepting traffic or spoofing a site can copy/tamper/replace the QR code Will this be a problem with HTTPS? When you open a page, a request will be made to my server to generat…

>As for QR codes, those can be copied The QR code are unique for every login attempt. After you scan the QR code and enter your phone's pin, my authenticator will send a request to…

> SMS based 2fa has many other problems What are these problems? It will be great if you can list some of them, I'd like to read more in detail.

I have read in a few places that using SMS is really insecure for 2FA. A few people on this thread (https://news.ycombinator.com/item?id=29004930) also said that SMS should be avoi…

Got it, but there will still be a network effect. You will just have to download it once and can add and manage accounts on a lot of websites.

>have a Msft Authenticator and a Google one I think you can just add all accounts to one authenticator. >make it work with one of these These authenticators, have no support for QR…

>agree with password-less. Does my idea sounds like something you would use? Will you download a authenticator app to avoid using user/pass?

I'm Ideating on offering Scan QR Code to Login as a Service. How it works? 1. Add your account to my authenticator app. 2. Whenever you need to sign-in, scan the QR code displayed …

>the website display the QR code and the phone scan it I'm exploring that right now, thx a lot. >I'm probably missing the point of your idea. It was mainly a way to do 2FA with a p…