jonny (nonvenomous) on Nostr: > phone suddenly dies > need to recover all my 2fa shit > most of it is TOTP in ...
> phone suddenly dies
> need to recover all my 2fa shit
> most of it is TOTP in password manager. fine! done!
> employer uses Duo because "more secure"
> can't login to enroll new phone because old phone dead, can't do duo auth.
> duo allows you to use text message 2fa to the "manage devices" menu
> duo defaults to allowing push approval from the locked homescreen
TOTP: simple, free, easy to recover, easy to implement, i can control it and make sure password required to access it
Duo: opaque corporate spyware, can get taken over by getting sim swapped, can auth from a stolen phone
security!
Published at
2026-10-28 21:06:39 UTCEvent JSON
{
"id": "0a987f60ccb841db76dabe29ffb8d57a913127b3c5e73e09d6e422fe27d8a137",
"pubkey": "9926f6c53162329fcb33481f0c5db4a015bdd63d564636ea13c35d4975c176e3",
"created_at": 1793221599,
"kind": 1,
"tags": [
[
"content-warning",
"employer MFA griping"
],
[
"proxy",
"https://neuromatch.social/users/jonny/statuses/117520570736462294",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "\u003e phone suddenly dies\n\u003e need to recover all my 2fa shit\n\u003e most of it is TOTP in password manager. fine! done!\n\u003e employer uses Duo because \"more secure\"\n\u003e can't login to enroll new phone because old phone dead, can't do duo auth.\n\u003e duo allows you to use text message 2fa to the \"manage devices\" menu\n\u003e duo defaults to allowing push approval from the locked homescreen\n\nTOTP: simple, free, easy to recover, easy to implement, i can control it and make sure password required to access it\nDuo: opaque corporate spyware, can get taken over by getting sim swapped, can auth from a stolen phone\n\nsecurity!",
"sig": "feffa58ace703388e4e59be2202c08bfe71119f4eda806a52b6859103712633c0ca213917c127865390eaba6d83c66a00c8b2698f60d8a638b47791635bd8d19"
}