Lapsus$ and SolarWinds hackers both use the same old trick to bypass MFA

Re:Lapsus$ and SolarWinds hackers both use the same old tric... by annoyingnoob on Wednesday March 30, 2022 @05:37PM (#30861106)

It is not obvious to everyone that a code may still be valid after its gone from your screen. You cannot use the first 3 digits from one code and the last 3 from another, so you start over when you don't have all 6 digits before the code changes on you.

Different strokes for different folks. I care to have folks be successful.

[ Parent | on HN ]

Re:Lapsus$ and SolarWinds hackers both use the same old tric... by ThePowerOfFuet on Thursday March 31, 2022 @01:16AM (#30864039)

This sounds like an education issue; if you were to say "wait until the code changes, then go for it", they have thirty seconds to read and type six digits.

If this still doesn't work for them, perhaps a hardware token they can tap might be a better solution.

[ Parent | on HN ]