ubuntu 23.10

I can access my employer’s local network if I authenticate with a 2fa. They suggest proprietary software, but aegis authenticator (found in fdroid) works fine.

The thing is, the phone’s screen is too small and it’s very cumbersome to navigate the screen and to click. It’s so bad I don’t want to use it, because fonts are so small you cannot read anything. It’s like they didn’t even try to optimize the local network for devices.

However, if I could emulate this app on an ubuntu based computer, I’d use it. Can it be done?

  • randy@lemmy.ca
    link
    fedilink
    arrow-up
    11
    ·
    edit-2
    11 months ago

    At a glance, it looks like Aegis generates standard TOTP tokens, which means there’s a lot of software that can do the same thing, so you don’t need to emulate Aegis. I use pass-otp (an extension to pass), but that’s command-line-only, and a lot to deal with if you’re not already using pass. From a quick search, it looks like Keysmith and OTPClient are decent graphical alternatives. From another quick search, OTPClient is available in Ubuntu 23.10.

    Edit: Re-reading your post, your issue is that you don’t like logging in on your phone, right? But Aegis just provides the code, you should be able to use the code from your phone to log in on your computer. TOTP codes are only affected by the secret values and the current time, so the code generated on your phone can be used on any device.

  • node815@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    11 months ago

    You can also mirror your Android screen via Scrcpy https://github.com/Genymobile/scrcpy

    Open Aegis, go to settings and then disable screen security. (Enabling screen security helps protect against and malicious screen capturing by malware)

    From there, it will show your Aegis screen on your PC. It requires ADB access so it depends on if you have that installed or can install it. But the link can get you through that part. :)

  • MamaVomit [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    11 months ago

    I don’t understand the scenario here. Typically, you only need the TOTP (time-based one-time password) from your 2FA app, enter it on your computer, and you can use the computer to access your resources. The app itself is actually not even supposed to be on the same device, as an added layer of security.

    It sounds like you need 2FA to run your company’s VPN (is that correct?). On your computer, you would launch the VPN, it’ll ask you for the TOTP (which you get from Aegis on your phone), and then you’re logged in and able to access company resources (on your computer).

  • bizdelnick@lemmy.ml
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    11 months ago

    There’s nothing special, it can be replaced with any TOTP/HOTP implementation. In particular, oathtool is supplied in most distros (it has only command line interface, probably there are also some GUI tools in your repos). However it does not support JSON key format that is provided as QR code for mobile 2FA apps. You have to copy and paste values from it manually.

    However this will likely violate your employer’s security policy. The point of 2FA is that secret key is stored on a separate device, so that it cannot be stealed together with your password.

    I recommend to try other Android apps on your phone. I use FreeOTP+ and have no problems with font readability. Some of my collegues use AndOTP and like it.

  • danielfgom@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    3
    ·
    11 months ago

    As an IT Technician/Sysadmin I highly recommend you use the one your IT team told you to use. If you run into issues they’ll be able to help but not if your using some obscure app they’ve never heard of.

  • Extras@lemmy.today
    link
    fedilink
    arrow-up
    2
    ·
    11 months ago

    Copy the totp seed from aegis and use something like keepassxc to generate the codes

  • RegalPotoo@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    11 months ago

    No actual answer, but I’d suggest reading your employers computer use policy carefully - for me at least, sharing an OTP secret with an unauthorized application would be a pretty serious policy breach. Probably wouldn’t get fired for it (unless it resulted in an actual breach) but would definitely get a “don’t do that again” letter from HR

  • Artyom@lemm.ee
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    11 months ago

    Firefox has 2FA extensions. Just remember that if both your authentications are on one device, you’re not getting a huge security boost.