Yeah, they overlap since I did whole hour (120 30-second codes). I didn’t know specific time, so it’s 2 pages, 3 hours, 42 minutes and 30 seconds.
Credit goes to oathtool (and LibreOffice Write).
Font: Liberation Mono
Yeah, they overlap since I did whole hour (120 30-second codes). I didn’t know specific time, so it’s 2 pages, 3 hours, 42 minutes and 30 seconds.
Credit goes to oathtool (and LibreOffice Write).
Font: Liberation Mono
2fa is something you have and something you know.
Password is something you know, this paper is something you have.
Something you know, this paper will quickly become something everyone knows the minute the weakest link in your company security pipeline gets a hold of one.
Thats why they are time sensitive.
Yeah and the first thing a pentester is doing is snapping a shot of that as they walk by. Its not taking long. Theres at least an hour that we can see in this screenshot. That is enough time.
the paper is not something you know, it is not possible to memorize it.
Good thing we all have phones with cameras, and there are 2 hours worth of codes printed here.
So now it is something that everyone has, it is still not something “you know”. Still counts as a second factor.
If you’re leaving your otp unlocked on your desk, you’re doing it wrong.
Do you work directly with the average user? They aren’t locking this in their desk drawers when they need it to login. This is getting left on someone’s desk 100%