Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> impersonate you for the next 30 seconds.

AFAIK some websites allow you to use the previous TOTP code for convenience for some more seconds. That makes the total time to impersonate you to be 30 (or whatever was configured while issuing the TOTP secret) plus the grace period websites allow.

Edit: formatting



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: