From one of the remaining comments that weren’t removed (yet):
The app doesn’t fit the OSI open source definition since you cannot modify and redistribute it.
Based on the README, I think this has to do with the Glide typing which comes from a closed source library
The standard is called TOTP and Google became synonymous with it because they pushed it in the late 2000s for Gmail and have a large user base. Other sites did have systems beforehand, like Paypay which had a dedicated fob, but that was not widely used. Gmail was likely most people’s first experience with MFA and Google pushed their own Authenticator app (and didn’t really advertise that others could be used). As other sites got on board, it was easier to tell people to use the app they use for google to get their code, since you could assume people had the app.
Basically that made a situation where people who had a different TOTP app knew their app would work with “Google Authenticator” but for those without an app or using Google Authenticator, they were likely unaware of the interoperability and standards behind the mechanisms.
Plus google doesn’t really care if the obscure LucasArt codec is actually fixed, they’re raising the bugs publicly to sell their AI. This is marketing, not security. The more bugs it finds the better, since sales doesn’t care about the quality of the bugs found.
Ahh whoopee, my bad. it was hard to piece together the conversation from modlog. Thanks for clarifying, deleted my original comment. For other’s reading this, the gist of what i was wrong about is below:
Originally I thought that the reason Heliboard comments were deleted were because of the use of closed source libraries for Glide swiping, but I was mistaken.