@lauren@mastodon.laurenweinstein.org
2026-06-03 18:00 UTC
@dangoodin@infosec.exchange You asked about TOTP. Yes, a broken implementation can be stuffed.
Replies (1)
-
@dangoodin@infosec.exchange 2026-06-03 18:03
@lauren@mastodon.laurenweinstein.org Yes, with more than 4,000 guesses in 40 seconds to be successful. That sounds possible, but also leaves a large margin for doubt.