71–78 of 78 posts
This is cool, will install it right now. Shameless plug: I work in the same field but instead of storing passwords trying to replace passwords and 2fa altogether with one scheme working as a web app: truefactor.io/app
Second, a nitpick - the OS on Mac computers is called "OS X" since the time of OS X 10.7 Lion and not "Mac OS X". Please fix that. The name "Mac OS X" was used only for older releases up to Mac OS X 10.6 Snow Leopard. :)
Earlier quoted context omitted.
The contents of the second audit in particular deeply troubled me. Lots of simple but grevious mistakes. It's nice that they got the audit though.
FWIW, the audit happened directly in the middle of a dev cycle, without any of the normal internal review of that code first. The audit report describes those circumstances in the first few pages. Scheduling audits is hard work!
This is cool, will install it right now. Shameless plug: I work in the same field but instead of storing passwords trying to replace passwords and 2fa altogether with one scheme working as a web app: truefactor.io/app
How does it work? Any info on that.
The integration flow for consumer websites is also very simple: 1 tiny JS lib and 10-20 lines of code on the server side to verify 2 signatures against public keys of the user.
Out of box fixes passwords reuse, phishing, bruteforce, 2factorization, enforceable, open and free etc
Why don't everyone use Firefox sync, it is also zero-knowledge? I am not provoking, just curious.
Strange that there are no iOS client.
Warning: long answer ahead. Short version: there will be very soon. I use it daily on my own iPhone. The issue is that because Crypton does crypto with JavaScript in the web view of a Cordova app, it needs to not be stupendously slow. The default iOS web view available for Cordova apps, up until iOS 8, was the UIWebView which is well known for not having access to a JIT (like Nitro in mobile Safari). This means that…
If you need a beta tester please mail me (martindk at mailbox.org)