News for hackers. Stuff that matters.
Re:Google: Security Keys Neutralized Employee Phishing by Dylan16807 on Tuesday July 24, 2018 @09:52PM (#17606373)
Ratchets serve multiple purposes, but they're fundamentally about having a state on both ends that ticks forward per use. TOTP tokens are stateless and "ratchet" is not the right word for only allowing one login per 30 seconds.

There are no comments on this comment yet.