2026-09-22 22:39 UTC
@gloriouscow@oldbytes.space Well, sadly, it doesn't seem to be a "conventional" secret, since popping that code in to a TOTP generator doesn't work...
However... their code is 30min valid lifetime versus a standard TOTP, so maybe custom code and a completely different 6 digit result
Replies (1)
-
@gloriouscow@oldbytes.space 2026-09-22 22:50
@kajer@infosec.exchange from one-time-passcode-xxxx.js "mfa-key": null == K ? void 0 : K.mfaOTPSessionKey, i think it's just a session id. probably fine