2 ms·
They could, but it's still limiting - the maximum number of challenges the attacker is able to satisfy is the number of times you touch the token before you rea
by mjg59 4y ago
They could, but it's still limiting - the maximum number of challenges the attacker is able to satisfy is the number of times you touch the token before you realise that something's up.
- jabbany 4y agoBased on a certain recent high profile hack, getting just one 2FA auth this way could already be enough ;-) I doubt most people would be suspicious if their system prompted them to touch their key, they touched it, the software kept waiting, so they touch it again and it works this time.