News for hackers. Stuff that matters.
Re:Lapsus$ and SolarWinds hackers both use the same old tric... by makeitdouble on Wednesday March 30, 2022 @06:43PM (#30861752)
TBF the code still being valid doesn’t help much if the user hasn’t memorized and/or finished typing it all.

Sitting next to some family members, they really can’t remember more than one or two letters at a time, and will peck and hunt each of it. Except if they were typing the last digit, the code disappearing from screen is basically the end of it for them.

Re:Lapsus$ and SolarWinds hackers both use the same old tric... by ThePowerOfFuet on Thursday March 31, 2022 @01:18AM (#30864048)
In cases like these, I tell them "wait until the code changes, then go for it", so that they have thirty full seconds to read and type six digits.

If this still doesn't work for them, perhaps a hardware token they can tap might be a better solution.