爱吃姜

normal but alright

[爱吃姜 @WangChengOrange]

@bboczeng 那mu要去2000了

[爱吃姜 @WangChengOrange]

回归X

[爱吃姜 @WangChengOrange]

#新头像

[UNICORN⚡️🦄 @UnicornBitcoin]

值得N刷的36部财经纪录片‼️

共 6 幅图🖼️

1.

[爱吃姜 @WangChengOrange]

@OmicronJinPing0 怎么就封城了

[图拉鼎 @tualatrix]

和大家分享一下我的日本旅行签证的办理进展，今天成功下签了🎉

我是8月24日快递将护照和材料发到上海的，办理日本单次旅行签证，五个完整工作日就下签了。

接下去准备好好做旅行计划了！第一次去日本有什么必做的准备事项和功课吗？请大家赐教！

[瞎玩菌 @Blind___Gamer]

只有4个

[爱吃姜 @WangChengOrange]

@tualatrix 建行也别用了

[爱吃姜 @WangChengOrange]

@cyandev 好👌

[Bytebytego @bytebytego]

How does 𝐆𝐨𝐨𝐠𝐥𝐞 𝐀𝐮𝐭𝐡𝐞𝐧𝐭𝐢𝐜𝐚𝐭𝐨𝐫 (or other types of 2-factor authenticators) work?

Google authenticator is commonly used for logging into our accounts when 2-factor authentication is enabled. How does it guarantee security?

Google Authenticator is a software-based authenticator that implements a two-step verification service. The diagram below provides detail.

There are two stages involved:
🔹 Stage 1 - The user enables Google two-step verification
🔹 Stage 2 - The user uses the authenticator for logging in, etc.

Let’s look at these stages.

𝐒𝐭𝐚𝐠𝐞 1
Steps 1 and 2: Bob opens the web page to enable two-step verification. The front end requests a secret key. The authentication service generates the secret key for Bob and stores it in the database.

Step 3: The authentication service returns a URI to the front end. The URI is composed of a key issuer, username, and secret key. The URI is displayed in the form of a QR code on the web page.

Step 4: Bob then uses Google Authenticator to scan the generated QR code. The secret key is stored in the authenticator.

𝐒𝐭𝐚𝐠𝐞 2
Steps 1 and 2: Bob wants to log into a website with Google two-step verification. For this, he needs the password. Every 30 seconds, Google Authenticator generates a 6-digit password using TOTP (Time-based One Time Password) algorithm. Bob uses the password to enter the website.

Steps 3 and 4: The front end sends Bob's password to the backend for authentication. The authentication service reads the secret key from the database and generates a 6-digit password using the same TOTP algorithm as the client.

Step 5: The authentication service compares the two passwords generated by the client and the server, and returns the comparison result to the front. Bob can proceed with the login process only if the two passwords match.

Is this authentication mechanism 𝐬𝐚𝐟𝐞?
🔹 Can the secret key be obtained by others?
We need to make sure the secret key is transmitted using HTTPS. The authenticator client and the database store the secret key, and we need to ensure the secret keys are encrypted.
🔹 Can the 6-digit password be guessed by hackers?
No. The password has 6 digits, so the generated password has 1 million potential combinations. Plus, the password changes every 30 seconds. If hackers want to guess the password in 30 seconds, they need to enter 30,000 combinations per second.

Over to you: What are some of the other 2-factor authentication devices you used?

–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/FIzCeaWsZV

[Elon Musk @elonmusk]

The fight will be managed by my and Zuck’s foundations (not UFC).

Livestream will be on this platform and Meta. Everything in camera frame will be ancient Rome, so nothing modern at all.

I spoke to the PM of Italy and Minister of Culture. They have agreed on an epic location.

[爱吃姜 @WangChengOrange]

@Doraemon_TUZI 哎取关了

[爱吃姜 @WangChengOrange]

@NextSkillslevel crazy

[Next Level Skills @NextSkillslevel]

Dude pulling a 'superman' on a bike

[爱吃姜 @WangChengOrange]

@Jojo99275148 @FromMelting @RfaCantonese @lvcatablecc 亲���的就变成开放派了？什么定义啊6

[爱吃姜 @WangChengOrange]

@Jojo99275148 @CalgaryTechs @bbcchinese 你是真的6

[greg @greg16676935420]

Crazy to see how much Twitter has changed since Elon invented it 17 years ago

[爱吃姜 @WangChengOrange]

@vvan688 @wangzhian8848 本质还是人口基数过大，教育资源与生源不匹配

[爱吃姜 @WangChengOrange]

@mayemusk @elonmusk @SpaceX take me next time