Their OTP solution is bruteforceable as well: https://mastodon.catgirl.cloud/@49016/117475921584308861

This becomes an inverse Russian roulette: only one of six chambers is not loaded.

Waiting for a release like "... the level of social media amplification around this incident has brought scrutiny that is out of proportion to OTP 1FA place in our business. In view of this, after detailed deliberations our board has concluded that withdrawing from global OTP 1FA is the right decision for eMudhra and its shareholders"

▲

throw0101c 3 hours ago | parent [-]

> This becomes an inverse Russian roulette: only one of six chambers is not loaded.

At what point does it become Russian roulette with a Glock?

	▲	boricj 2 hours ago \| parent [-]
		One chamber is enough to play Russian roulette... once. However, the probability to get to play a second time is rather slim.

▲

VorpalWay an hour ago | parent | prev | next [-]

Link is broken, gives some randomly generated text when using Brave on Android. Their AI bot detection is not very good.

	▲	rdtsc an hour ago \| parent [-]
		> fear not, here's a complete bypass of their 1fa otp login system. they encrypt OTPs to a public key and issue those behind cloudflare turnstile. this key to be precise:

▲

rauli_ an hour ago | parent | prev | next [-]

That Web site thinks that my browser is an AI scraper for some reason.

▲

anakaine an hour ago | parent | prev | next [-]

It's not clear what you have linked there.

	▲	rdtsc an hour ago \| parent [-]
		Paste from mastodon: > fear not, here's a complete bypass of their 1fa otp login system. they encrypt OTPs to a public key and issue those behind cloudflare turnstile. this key to be precise:

▲

thraway3837 an hour ago | parent | prev [-]

"However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to OTP's place in our business"