Flatsonar

Authenticator

by Bilal Elmoussaoui

A Two-Factor Authentication application

Broad permissions Suspicious publisher GPL-3.0+ v3.32.2
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made Authenticator.

Liberapay
Screenshot 1 of Authenticator Screenshot 2 of Authenticator Screenshot 3 of Authenticator Screenshot 4 of Authenticator

About

Simple application that generates a two-factor authentication code, created for GNOME. Features: - QR code scanner - Beautiful UI - Huge database of more than 560 supported services - Keep your PIN tokens secure by locking the application with a password - Automatically fetch an image for services using their favicon - The possibility to add new services - Dark theme and night light

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • network
    --share=network
  • talks to org.gnome.Shell.Screenshot
    --talk-name=org.gnome.Shell.Screenshot
  • talks to org.gnome.SettingsDaemon.Color
    --talk-name=org.gnome.SettingsDaemon.Color
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf
  • sets environment variable ZBAR_PATH
    --env=ZBAR_PATH=/app/lib/libzbar.so
  • owns its own bus name
    --own-name=com.github.bilelmoussaoui.AuthenticatorDevel.SearchProvider

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • com.github.bilelmoussaoui.AuthenticatorDevel claims the com.github.bilelmoussaoui namespace but is hosted by github.com/sparsa and does not build the owner's code
    publisher:namespace
  • https://github.com/oz123/rotacitnehtua also publishes this app id
    publisher:collision
  • fetches from git.linuxtv.org over unencrypted git: anyone on the path can swap the bytes
    source:insecure-url
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned
  • same name as com.belmoussaoui.Authenticator on Flathub but from a different repository
    publisher:lookalike

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.