Hacker News new | ask | show | jobs
by fastball 1349 days ago
What security context are we talking about where that 1 minute matters?
1 comments
leodriesch 1349 days ago
A person has accessed your account and you’ve noticed it via sign-in-email. You change your password.

Attacker now still has 1-10 minutes to access your account.

link