{"comment":{"url":"https://api.github.com/repos/hawicz/google-authenticator/comments/16193652","html_url":"https://github.com/hawicz/google-authenticator/commit/3b481c5cad457a419aa87bbe56311d46bf0ec3c8#commitcomment-16193652","id":16193652,"user":{"login":"hawicz","id":763777,"avatar_url":"https://avatars.githubusercontent.com/u/763777?v=3","gravatar_id":"","url":"https://api.github.com/users/hawicz","html_url":"https://github.com/hawicz","followers_url":"https://api.github.com/users/hawicz/followers","following_url":"https://api.github.com/users/hawicz/following{/other_user}","gists_url":"https://api.github.com/users/hawicz/gists{/gist_id}","starred_url":"https://api.github.com/users/hawicz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hawicz/subscriptions","organizations_url":"https://api.github.com/users/hawicz/orgs","repos_url":"https://api.github.com/users/hawicz/repos","events_url":"https://api.github.com/users/hawicz/events{/privacy}","received_events_url":"https://api.github.com/users/hawicz/received_events","type":"User","site_admin":false},"position":25,"line":64,"path":"libpam/FILEFORMAT","commit_id":"3b481c5cad457a419aa87bbe56311d46bf0ec3c8","created_at":"2016-02-19T02:22:18Z","updated_at":"2016-02-19T02:22:18Z","body":"Sure you can.  For any code that the user enters, it's checked against the scratch codes (line 1760, check_scratch_codes(...)) but if that fails it's checked against the otp codes (check_counterbased_code(...) or check_timebased_code(...)).  It doesn't choose only one or the other based on the length of the value the user entered.\r\nThis file is talking about the format of the per-user ~/.google_authenticator file, so the phrase \"Any all-numeric sequence of eight-digit numbers\" refers to a line in that file, not a code that the user enters."}}