Hacker News new | ask | show | jobs
by fmajid 1948 days ago
If it is TOTP/HOTP based rather than U2F (6-digit codes), it is vulnerable to real-time spoofing.
1 comments
btbuilder 1948 days ago
Barclays PinSentry uses CAP:

https://en.wikipedia.org/wiki/Chip_Authentication_Program

link