tallefer / lwuitgauthj2me Goto Github PK

What steps will reproduce the problem?
1.installed GoogleAuthenticatorJ2ME_1.2.0.jar successfuly  on Nokia E71.
2.configured app with secret key and email id.
3.codes are generated , but not validating on login

What is the expected output? What do you see instead?
it should validate code.

What version of the product are you using? On what operating system?
GoogleAuthenticatorJ2ME_1.2.0.jar on E71

Please provide any additional information below.
does the timezone makes any difference on code generation if yes then how to 
configure it in app.

Thanks.
Pankaj

I am using this app on my nokia e6 (symbian) for about a month now and i find 
it very useful and with no issues thus far.

However is there a way (even if its long winded) to backup accounts created on 
it?

Thank you very much for such a useful app :)

What steps will reproduce the problem?
1. Tried to install it to Nokia E7 phone

What is the expected output? What do you see instead?

Can't install. Received error.
Received JSR error, installation cancelled

What version of the product are you using? On what operating system?


What else do you need to know? Any suggestions what to do?

Steps to reproduce the problem:
1. Go to "Create new account" screen, fill in both fields, choose "Create 
account".
2. After step 1 software starts generating tokens. Go to "Edit account" screen 
for the account created in step 1, there we can clearly see the key in plain 
text. This allows any attacker with brief physical access to the device running 
this software to easily copy the key and later reenter it into any 
"google-authenticator" software thus creating a cloned authentication device 
operated by the attacker.

Possible fix:
1. In "Edit account" mode the key should be always hidden, no editing and only 
replacing it with a different key should be allowed.

Software version tested: 1.0.1
Operating system: Symbian OS version 9.3
Device: Nokia C5-00

What steps will reproduce the problem?
1. Install lwuitgauthj2me using jbed on WM 6.5.1 device
2. Setup two-factor auth with lastpass email account
3. attempt to use generated token with lastpass

What is the expected output? What do you see instead?

A valid token, Token failed, please make sure device is set to correct local 
time.

What version of the product are you using? On what operating system?

current version, WinMo 6.5.1 w/Jbed 

Please provide any additional information below.

WinMo devices get their time from the tower, so?

What steps will reproduce the problem?

1. Please allow a little Customization to replace "GoogleAuthenticatorJ2ME" on 
the main screen with "GoogleApps-Domain-Name (What so ever it is) 
Authenticator" 

Is the above possible? I shall be very thankful if you provide a solution to 
the request.

Thank you.

Might be a problem with Google Code, I guess.

the phone is fairly low end, but ought to be able to run this. Attempting to 
download the JAR silently fails (it downloads the file, offers no options for 
using it);
attempting to download the JAD gets an Access Denied

I installed lwuitgauthj2me 1.0.1 on a Nokia 2600c AT&T branded phone. It starts 
and displayes the main menu. However, selecting either "New Account" or "About" 
from the menu only shows "An internal application error".

What steps will reproduce the problem?
1. Download using QR code on Nokia E71
2. Start the installation
3. "Preparing installation..."

What is the expected output? What do you see instead?
Instead of Application installed, I see "Application is not compatible with 
this phone"

What version of the product are you using? On what operating system?
Latest downloads. Nokia E71 S60 3rd Edition

Please provide any additional information below.

What steps will reproduce the problem?
1. send jar file to phone (across bluetooth)
2. Accept/install file when prompted

What is the expected output? What do you see instead?

Get error, "Failed Invalid file", the jar file (extracted) from 
http://code.google.com/p/gauthj2me/downloads/detail?name=gauthj2me.rar installs 
and works.

What version of the product are you using? On what operating system?

Tried GoogleAuthenticatorJ2ME_1.1.1.jar and GoogleAuthenticatorJ2ME_1.1.0.jar 
from issue #3 http://code.google.com/p/lwuitgauthj2me/issues/detail?id=3

The OS on the phone is the firmware that it came with:

2010-07-17 14:06:11 
S/W Version: 
R374_G_0E.42.09R_A 
Flex version: 
GSMV3xxTMB01NA14D-2.0.S.3.2.7.0.26.9.0.28.0.1.0.1.46.K.14.3B.K 
H/W Version: 
SJUG1154HB

razr v3 has:

CLDC Version: 1.0
MIDP Version: 2.0
Data space: 2354K free
Heap size: 800K

That's pretty much it. I just want to install the Google Authentification app 
on my LG 900G for use with the LastPass Firefox extension.  I was told that the 
LG 900G could run apps. I saw a video of someone using the Google Maps app on 
it.  So I assume it can run Google Apps, or at least some of them.  I searched 
for the phone's OS on Google and it apparently runs on "Java OS" which, I 
assume again, is synonymous with "J2ME".  I downloaded the latest .jar 
installer (v. 1.1.0) from your site onto my PC (to save minutes) and wish to 
install it on my 900G via USB.  I've never done anything like this before and 
could not find any instructions.  Thanks for your help.  Alex

What steps will reproduce the problem?
1.Start the installation from the .jar file

What is the expected output? What do you see instead?
Instead of any further prompts, I get the error message "Unable to install. 
Invalid version."


What version of the product are you using? On what operating system?
I'm using a Nokia N72 running Symbian S60.


Please provide any additional information below.
So, when this failed, I tried installing from the .jar file attatched to this 
comment: http://code.google.com/p/lwuitgauthj2me/issues/detail?id=3#c7.
This time, the app was installed successfully. But when I open it, I get a pop 
up saying "java.lang.NullPointerException". I can see the app's home screen in 
the background though.
Next, I downloaded the original version of the app, unzipped it and edited the 
MANIFEST.MF file myself(as explained to do in the above comment), re-zipped all 
the files, renamed the zip to jar and then tried to install it on my phone. 
This time it did ask me a couple of things like where I wanna install the file 
etc., but then, before the actual installation starts, it says, "Authorization 
failed". Any ideas as to what I should do?

* What steps will reproduce the problem?
1. Enter several keys.
2. Attempt to change order of keys.
3. Notice inability to change order of keys.

* What is the expected output? What do you see instead?

I use several keys on a regular basis and wish to occasionally change the order 
of the keys so I can keep the most-used keys at the top of the display.

It does not appear possible to change the order of the keys.

* What version of the product are you using? On what operating system?

2.0, running on a Samsung B-2710 mobile phone.

* Please provide any additional information below.

Other than this issue, the application runs as expected. Many thanks. My B-2710 
phone is ruggedized and much more suitable for day-to-day use than my rather 
fragile iPod Touch running the official iOS version.

What steps will reproduce the problem?
1.Just some minutes ago,I found the 6 numbers didn't change.I had to do out and 
in to see the new numbers if I missed them last time.
2.
3.

What is the expected output? What do you see instead?
expected output:numbers change every 30 seconds; 
I see:number did'n change

What version of the product are you using? On what operating system?
1.2.0 on nokia E63 

Please provide any additional information below.

First and foremoset thanks for a very nice & useful app!

What steps will reproduce the problem?
1. start application at the end of keying period (e.g. xx:25 or xx:55)
2. 5 seconds later the TOTP should change, instead the app displays a wrong 
TOTP for the next 25 seconds

What is the expected output? What do you see instead?
New TOTP is expected from the begining of 30s period, the old TOTP is displayed.

What version of the product are you using? On what operating system?
Latest version on Nokia C2-01

Please provide any additional information below.
The problem is the updateKeysTask timer set to 30 seconds instead of 1 second: 
http://code.google.com/p/lwuitgauthj2me/source/browse/src/userclasses/AccountMan
ager.java#38

The bug probably went undetected because Google is using loose TOTP window on 
their side. Google Authenticator can be used as a PAM module for authenticating 
to Linux systems and the TOTP window requirements can be set more strictly. 
This subtle bug makes the application useles for such strict auth. Please 
correct as soon as is convenient.

Also, I have a feature suggestion/request: a countdown display would be really, 
really useful!