keybase / keybase/client

printscreen or photo of qrcode for new device have a long valid time

Open
#20,424 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.2k
Forks
1.3k
Avg merge
12h 58m
Merged PRs (30d)
56

Description

Having trouble reading QRCode, I realized that I could make a printscreen zoom in and read with my phone that has camera issues.

But with that I realized that if my computer is being spied on, somehow someone could photograph QRCode, I could register another cell phone during this my attempt.

I mentioned such a problem in issue #20423

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading issue #20423, which this report references, and clarify the proposed QR-code validity change for new-device registration. Done requires an agreed expiration behavior that prevents a photographed or screenshotted code from being reused during registration.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.