New answers tagged one-time-password
If your friend is telling the truth then there are a few different ways the attackers could have gotten the code: If the phone is a GSM it's possible they could have cloned his SIM and received his text messages that way Text messages are processed by systems called SMS-Cs - servers running software that handles text messages which are located in the cell ...
If it's a four-digit password and you get three tries to enter it, then three in every 10,000 attacks will succeed by trying random passwords. That doesn't sound like very much, but if every one of the 1 billion or so people with a credit or debit card were to be attacked in this way then there would be 300,000 people all telling stories like your friend's.
Rather than going through the whole #bitcoin-otc login procedure on behalf of your users (which, in the case of an existing session, may either be denied or attempt to replace the current session), you could have a bot present in #bitcoin-otc and then either require the ident-verified users to message it with a randomly generated token, or have them request ...
I know this isn't a direct answer, but per your request in comments, I am submitting it. Instead of rolling your own protocol, take advantage of existing protocols to do what you need. Your spec describes a web-based protocol with encryption and limited access to data passed from phone to PC. This web service needs high availability and uptime. Twitter can ...
Top 50 recent answers are included