freeotp-devel November 2015

freeotp-devel@lists.fedorahosted.org

5 participants
5 discussions

Camera view for scanning QR code is upside down
by Dan Liew 08 Dec '15

08 Dec '15

Hi, I just installed FreeOTP (version 1.5) and I thought I'd let you know there's a minor issue with the Camera view used for scanning QR codes. On my device (Nexus 6p running Android 6.0) the camera view is upside down. On my old device (Nexus 4) the camera view is the right way up so I'm guessing its either an issue with Android 6.0 or specific to the Nexus6p. Thanks, Dan.

4 4

Re: Android app - import/export feature
by toddfas 09 Nov '15

09 Nov '15

Sent this email yesterday but it never got posted. Trying again without the attachment to see if that is blocking it. You can also view the changes here (ignore the *.iml and .idea/* changes): https://github.com/tfasz/otp/compare/8fdaf72159abe0984531e0639678a61f4dbdf2… On Mon, Nov 2, 2015 at 9:09 AM, toddfas <toddfas(a)gmail.com> wrote: > I transferred to a new phone a few weeks back and was reminded once again > about how much of a pain it is to setup all of my OTP tokens again (9 > accounts in total). I was previously using Google Authenticator but found > FreeOTP recently and decided to switch to it since I was starting from > scratch. Nice app and thanks for all of the work putting it together. I > liked the fact it is entirely offline and does not try to do too much (ala > Authy). > > Export and import was the one feature I found to be missing (and based on > the Google Play store comments a number of other people agree). While I am > not an Android developer, I had some time this weekend and decided to take > a shot at implementing it. The primary target use case is backing up tokens > on one phone to external storage so they can be stored somewhere safe and > eventually imported onto a new phone. > > Changes consist of: > - a new export and import menu option created by the About menu > - when you pick export you are prompted to enter an encryption passphrase > - a JSON array of the tokens are generated > - the JSON array is encrypted with the passphrase provided > - uses encryption library described at > http://tozny.com/blog/encrypting-strings-in-android-lets-make-better-mistak… > - library provides AES 128 encryption with salt and HMAC authentication > - the encrypted contents are Base64 encoded and written to a specific file > on external storage (ctx.getExternalFilesDir(), "tokenBackup.txt") > > Import process is the reverse: > - choose import menu option > - enter decryption passphrase > - decrypt contents from same file location (assuming file exists or has > been restored to same location) > - call TokenPersistence.add() for each token - will skip any existing > matching tokens > > Would be interested in getting feedback on this and see if it is something > that the team would consider incorporating. I've attached a patch file. > > Thanks, > Todd >

1 1

RE: Re: Feedback on patch for #69
by Philip Gillißen 09 Nov '15

09 Nov '15

Nathaniel wrote: > I am planning to address this bug in the next revision which will > contain fingerprint support (via my new Nexus 5x). It will require a > rewrite of this code and I'll address it then. Ok, this sound good, thank you! > I do not intend to support token export. Users should create multiple > tokens or use TOTP. Servers which only support a single HOTP token > should be fixed. I thought more of a backup functionality instead of a multi-device token export. So that you can export your current tokens and import it later on if you crashed your device. Is that also not of interest? Thanks Philip --- Alle Postfächer an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen

2 1

Feedback on patch for #69
by Philip Gillißen 09 Nov '15

09 Nov '15

Dear list, I started using freeotp a few weeks ago and it works like a charm! Thank you for this app! I have a small question. I contributed a patch for a minor "defect" in the app and would like to ask you for feedback on the patch. It deals with scanning tokens with an already existing name. I created and updated a ticket for that: https://fedorahosted.org/freeotp/ticket/69 Would you mind looking into the bug and the patch I attached? Additionally, I'm quite interested in contributing a import/export functionality to the app. Would that be of interest? Thanks in advance! Kind regards, Philip --- Alle Postfächer an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen

2 1

iOS crash bug on startup (app unusable)
by Phil Pennock 07 Nov '15

07 Nov '15

Folks, Trying out FreeOTP as my new TOTP code generator app, loading in TOTP secrets, I tried something a little silly and: (1) immediately crashed FreeOTP (2) FreeOTP is crashing on startup, so I can't get in to use any codes What I did: generated a QR code which used a non-ASCII UTF-8 character in the Issuer section. Specifically, my `issuer` was: Facebook₂ The intent was to hint at being a second facebook account in the Issuer field, since FreeOTP makes the Issuer so much larger than the account name. I should have done this experiment with the first code added, not the 17th. Stupid of me. Device: iPhone 6S OS Build: 9.1 (13B143) App: FreeOTP Authenticator / Red Hat / Version 1.1 I still have my old phone with the codes in, so I'm not locked out of anything. Is this going to be an easy fix where an update can let me back in with no data loss? Thanks, -Phil

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

freeotp-devel November 2015