3 ms·
Do people not track the last used time window of a TOTP and require a newer window for subsequent events? Most libraries I’ve used come with that as part of the
by Dachande663 3y ago
Do people not track the last used time window of a TOTP and require a newer window for subsequent events? Most libraries I’ve used come with that as part of the interface.
- gs17 3y agoIt wouldn't help here, the OTP was only actually used when he received the phished login. The fake site didn't submit it to the AOL servers.
- tgsovlerkhgsel 3y agoSome do, some don't and don't consider it a vulnerability when reported.