all guides out there lead to configuration open to brute-force attacks

[maarten]

I posted an issue at Google Code about this package: https://github.com/google/google-authenticator/issues/514.
All the guides out there (e.g.: http://www.howtogeek.com/208205/how-to-use-two-factor-authentication-on-your-linux-desktop-with-google-authenticator/ and http://askubuntu.com/questions/193248/google-authenticator-for-desktop-lightdm-or-gdm-plugin) lead to configurations that leave your system wide open for brute force attacks on the first factor: the password. This is exactly what people expect to be solved with this package.

A possible solution could be to rename this package, which will invalidate all existing manuals, and to place a new and secure instruction on the ubuntu channels for the new package name.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Jeremy Bícha (jbicha)]

What exactly is the bug that needs fixing here?

Is there documentation in Ubuntu itself that is wrong?

If it's external documentation, then please report the issue to the publishers of that documentation, but that's not really an Ubuntu bug then.

[Launchpad Janitor (janitor)]

[Expired for google-authenticator (Ubuntu) because there has been no activity for 60 days.]