But MFA is there to prevent this compromise from affecting the service and alert users/admins to the compromise, right?
If you have username and password and are able to force the TOTP in the 60s window, the TOTP would be useless imho.
If you have username and password and are able to force the TOTP in the 60s window, the TOTP would be useless imho.
No comments yet.