Yubico Forum
https://forum.yubico.com/

[QUESTION] OTP can be copied and reused!
https://forum.yubico.com/viewtopic.php?f=35&t=2793
Page 1 of 1

Author:  gnapp42 [ Tue Nov 28, 2017 12:34 pm ]
Post subject:  [QUESTION] OTP can be copied and reused!

Hi i noted that i can reuse my otp codes when i use it for ssh.
My question, is there a way around this?
I mean one time passwords as it says, should only be valid one time. And with something like a keylogger someone could easily get someones OTP and reuse it.
How does this work? Is it like this everywhere or is this just with ssh since you map the keys with their id's.

*baad baad baad developers* ;P

Well to reply my own post it only seems true for last ones and only for a wile, i still think this is a security issue....

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/