Hacker News Reader

>The time displayed to the user will seem correct

This gets into fuzzy definitions of "correct" here. If the phone is showing the right local time, but internally has the wrong UTC time, does it matter?

View on HN

Yes. With many two-factor authenticator applications, your codes won't work if your clock is wrong.

Two-factor authenticator applications should be using UTC, and not the display time. I think that's what the parent comment's point was.

Right, but these phones have the wrong UTC, if I understand correctly. That's why they are in the write-up. Wrong local/display time is pretty hard to detect, unless you have coordinate data.

Given that, two factor where the second factor is a local authenticator program is not exactly a common thing.

And the UTC would be wrong.

Reply on news.ycombinator.com