Re: OAUTH TOTP

2024-04-29 Thread Martin Neitzel
PW> Apparently I need to "purchase an inexpensive OATH TOTP compatible PW> token device." Here's another "thumbs-up" for the pkg "oath-toolkit". I drive its oathtool(1) with a simple, rwx-- shell wrapper which collects my personal seed secrets and tells me both the current and upcoming TOTP,

Re: OAUTH TOTP

2024-04-29 Thread Greg Troxel
Staffan Thomen writes: > It used to be that google authenticator didn't automatically back up > your secrets, so you had to be very careful to copy them over when you > got a new phone and if your old phone was unusable you were hosed. > This has since been fixed, and it will back them up to

Re: ipv4_prefer

2024-04-29 Thread MLH
MLH wrote: > Jonathan A. Kollasch wrote: > > On Mon, Apr 29, 2024 at 02:16:13PM -0400, MLH wrote: > > > ifconfig : > > > re0: flags=0x8843 mtu 1500 > > > > > > capabilities=0x3f80 > > > capabilities=0x3f80 > > > enabled=0 > > > ec_capabilities=0x3 > > >

Re: ipv4_prefer

2024-04-29 Thread MLH
Jonathan A. Kollasch wrote: > On Mon, Apr 29, 2024 at 02:16:13PM -0400, MLH wrote: > > ifconfig : > > re0: flags=0x8843 mtu 1500 > > > > capabilities=0x3f80 > > capabilities=0x3f80 > > enabled=0 > > ec_capabilities=0x3 > > ec_enabled=0 > > address:

Re: ipv4_prefer

2024-04-29 Thread Jonathan A. Kollasch
On Mon, Apr 29, 2024 at 02:16:13PM -0400, MLH wrote: > ifconfig : > re0: flags=0x8843 mtu 1500 > > capabilities=0x3f80 > capabilities=0x3f80 > enabled=0 > ec_capabilities=0x3 > ec_enabled=0 > address: (xx:xx:xx:xx:xx:xx) > media: Ethernet

Re: ipv4_prefer

2024-04-29 Thread MLH
beaker wrote: > Lucifer wrote: > > On Sun, Apr 28, 2024, 5:16 PM beaker wrote: > > > > > m...@goathill.org (MLH) wrote: > > > > > > > It appears that some of the pkgsrc distfiles now are only available > > > > via ipv6 servers but how do you set ipv4_prefer mode so ipv6 attempts > > > > don't

Re: OAUTH TOTP

2024-04-29 Thread Greg Troxel
Benny Siegert writes: > The cheapest way to have TOTP is to install Google Authenticator on > your phone. Be careful when you choose a TOTP program that you are able to back up the seeds yourself, and that the program does not send the seeds to the cloud not adequately protected in the name of

Re: OAUTH TOTP

2024-04-29 Thread Rhialto
On Mon 29 Apr 2024 at 18:04:23 +0100, Patrick Welche wrote: > Apparently I need to "purchase an inexpensive OATH TOTP compatible > token device." Pkgsrc has as options at least security/keepassxc (big but secure (at least it pretends to be)) and security/2fa (small but totally insecure) (but in

Re: OAUTH TOTP

2024-04-29 Thread atomicules
On 29 April 2024 18:04:23 BST, Patrick Welche wrote: >Apparently I need to "purchase an inexpensive OATH TOTP compatible >token device." > >$ wtf oath >wtf: I don't know what `oath' means! >$ wtf totp >TOTP: time-based one time password > >Any suggestions on something that works on NetBSD/amd64?

Re: OAUTH TOTP

2024-04-29 Thread Benny Siegert
Am 29.04.24 um 19:04 schrieb Patrick Welche: Apparently I need to "purchase an inexpensive OATH TOTP compatible token device." $ wtf oath wtf: I don't know what `oath' means! That's because it's OAuth, not oath :) https://datatracker.ietf.org/doc/html/rfc6749 $ wtf totp TOTP: time-based one

Re: OAUTH TOTP

2024-04-29 Thread Martin Husemann
On Mon, Apr 29, 2024 at 06:04:23PM +0100, Patrick Welche wrote: > Apparently I need to "purchase an inexpensive OATH TOTP compatible > token device." > > $ wtf oath > wtf: I don't know what `oath' means! > $ wtf totp > TOTP: time-based one time password > > Any suggestions on something that

OAUTH TOTP

2024-04-29 Thread Patrick Welche
Apparently I need to "purchase an inexpensive OATH TOTP compatible token device." $ wtf oath wtf: I don't know what `oath' means! $ wtf totp TOTP: time-based one time password Any suggestions on something that works on NetBSD/amd64? Cheers, Patrick

Re: ipv4_prefer

2024-04-29 Thread beaker
Lucifer wrote: > On Sun, Apr 28, 2024, 5:16 PM beaker wrote: > > > m...@goathill.org (MLH) wrote: > > > > > It appears that some of the pkgsrc distfiles now are only available > > > via ipv6 servers but how do you set ipv4_prefer mode so ipv6 attempts > > > don't prevent normal ipv4 operation? >

NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-29 Thread Arvind
Hi friends, hoping someone might be able to help or point in the right direction. We have a NetBSD 10 machine that requires Root Filesystem Encryption (unlock using passphrase) during boot. The man pages are out of date and unfortunately not helpful (https://wiki.netbsd.org/security/cgdroot/).