vel, 1 month ago

@kaia

TOTP

Online-Abhängigkeit

​:neocat_googly_woozy:​

kaia, 1 month ago

@vel I wonder how the offline device does time synchro :jelsweat:

kura, 1 month ago

@kaia @vel rtc with battery. you gotta set time yourself (or correct drift at least, if it does calendar / dst)

but i could do that on a mobile phone without sim card and wireless access too. and i have my old mobile still. so eh.

vel, 1 month ago

@kaia you have to scan a QR code from their online service ​:afloofwoozy:​
https://www.reiner-sct.de/sync
Guess they put the Online-Abhängigkeit on the wrong side

kaia, 1 month ago

@vel :l_oh: wow so offline

kura, 1 month ago

@kaia @vel i bet the qr code does only list the current time or something. 😆

vel, 1 month ago

@kura @kaia probably
Looking at the documentation and manual you can’t even set the time manually and have to use their web service - even for setting the timezone ​:afloofwoozy:​

kura, 1 month ago

@vel @kaia so my idea of a smartphone that is not connected to wifi or sim card is much nicer to use. qed

cell, 1 month ago

@kaia @vel such things are actually quite common - there’s a reason why totp has time windows of like 30 seconds or a minute :neocat_3c:

m0xEE, 1 month ago

@kaia @vel
They have high-precision timers in them and a battery that lasts for a few years. Long time ago I was working for a company that had been using similiar thingies, SecurID tokens for OTP: https://breloma.m0xee.net/notice/AaAgSknbfuZfPeMin2
They are sold together with software that integrates well into other products, every box of 50 or so tokens came with a CD that had their cryptographic keys that you had to import into that software.