3 ms·
How is the other method supposed to help? The secret is generated completely on the client dongle and so if phished the attacker is going to get the token neede
by yalogin 8y ago
How is the other method supposed to help? The secret is generated completely on the client dongle and so if phished the attacker is going to get the token needed for that time window. The attacker logs in and disables the 2FA.