Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t...
by AkshitGarg on Saturday August 21, 2021 @09:14AM
(#28256757)
> impersonate you for the next 30 seconds.
AFAIK some websites allow you to use the previous TOTP code for convenience for some more seconds. That makes the total time to impersonate you to be 30 (or whatever was configured while issuing the TOTP secret) plus the grace period websites allow.
AFAIK some websites allow you to use the previous TOTP code for convenience for some more seconds. That makes the total time to impersonate you to be 30 (or whatever was configured while issuing the TOTP secret) plus the grace period websites allow.
Edit: formatting