hard20 pts · first answer countsauthenticationotpbrute-force
Guessing an OTP with no attempt limit
A 6-digit OTP is valid for 5 minutes and the API has no attempt limit. An attacker can try 1,000 different codes a second. What is their chance of success within one code's lifetime?
Discussion 0
Join free to post in the discussion.
Related questions
- How to store passwordsBackend Developer
- What HttpOnly does on a cookieBackend Developer
- Authentication versus authorizationBackend Developer
- What a password salt is forBackend Developer
- Is HTTP Basic auth encryptedBackend Developer
- Sending an access token to an APIBackend Developer
- What the Secure cookie flag doesBackend Developer
- Header that goes with a 401Backend Developer