Hacker News Reader

Yes any application can use it. I currently use it as a requirement to log into my server via SSH.

However, you are using a PAM module that was developed by Google. I'm not sure if Google's Authenticator program has enough of an API to allow any program to implement 2-factor authentication using their program yet, but it could be possible.

If the program uses the same algorithm I don't see why not. Here is a module for Drupal that uses Google Authenticator: http://drupal.org/project/ga_login This seems to be the implementation it's using: http://code.google.com/p/ga4php/source/browse/trunk/lib/ga4p...

Edit: of course, this is just another implementation of the TOTP method. It does not use Google's infrastructure to send you SMS / voice calls containing the code.

Python code to validate via Google authenticator (sorry, self link): http://www.brool.com/index.php/using-google-authenticator-fo...

Cool. I hadn't taken a look at the PAM module personally, so I didn't know if the code was as tightly nit to that implementation as some other crypto code (I'm looking at you, scrypt).

Good to see it can be implemented outside of Google products.

Reply on news.ycombinator.com