2026-07-12 12:44 UTC
@mjg59@nondeterministic.computer @psf@oldbytes.space What if a TOTP shared secret is also leaked? Some forms of 2FA are good for frustrating MITM attacks but not data breaches.
Replies (1)
-
@mjg59@nondeterministic.computer 2026-07-12 12:55
@nowster @psf@oldbytes.space different scenarios can have different outcomes, yes (but yes, this is a good reason for not using TOTP as a second factor - using actual cryptography provides much stronger benefits)