Hacker News Reader

Comment by gquere | Hacker News Reader

Their OTP solution is bruteforceable as well: https://mastodon.catgirl.cloud/@49016/117475921584308861

This becomes an inverse Russian roulette: only one of six chambers is not loaded.

Waiting for a release like "... the level of social media amplification around this incident has brought scrutiny that is out of proportion to OTP 1FA place in our business. In view of this, after detailed deliberations our board has concluded that withdrawing from global OTP 1FA is the right decision for eMudhra and its shareholders"

> This becomes an inverse Russian roulette: only one of six chambers is not loaded.

At what point does it become Russian roulette with a Glock?

One chamber is enough to play Russian roulette... once. However, the probability to get to play a second time is rather slim.

Link is broken, gives some randomly generated text when using Brave on Android. Their AI bot detection is not very good.

> fear not, here's a complete bypass of their 1fa otp login system. they encrypt OTPs to a public key and issue those behind cloudflare turnstile. this key to be precise:

That Web site thinks that my browser is an AI scraper for some reason.

It's not clear what you have linked there.

Paste from mastodon:

> fear not, here's a complete bypass of their 1fa otp login system. they encrypt OTPs to a public key and issue those behind cloudflare turnstile. this key to be precise:

"However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to OTP's place in our business"

Reply on news.ycombinator.com