←back to thread

TOTP tokens on my wrist with the smartest dumb watch

(blog.singleton.io)
274 points alexmolas | 1 comments | 26 Jul 24 19:20 UTC | HN request time: 0.001s | source
Show context
627467 ◴[26 Jul 24 23:33 UTC] No.41083265[source]▶
I love this, and have thought of doing the same with a dumb smartwatch but... is it good opsec to have top so visible/available? What about losing the watch or getting stolen?
replies(4): >>41083301 #>>41083310 #>>41086601 #>>41087016 #
0cf8612b2e1e ◴[26 Jul 24 23:39 UTC] No.41083301[source]▶
Unless the owner walks around proclaiming, “This is my second factor”, a casual observer is just going to think it is a broken watch.
replies(2): >>41084249 #>>41084712 #
denysvitali ◴[27 Jul 24 05:58 UTC] No.41084712[source]▶
This is why you create a blog post and share it with the world /s
replies(1): >>41086002 #
1. marcus0x62 ◴[27 Jul 24 12:01 UTC] No.41086002{3}[source]▶
What's the threat model here? An attacker is going to read this person's blog post, track them down in real life, and steal their watch to get access to their github account? That seems...unlikely.