[liberationtech] Time validation for 2-step verification codes

[Amin Sabeti]

Hi,

Recently, a bunch of Iranian journalists/ activists have been targeted by
Iranian hackers.

Some of them said their 2-step verification was active during the attack
but hacker could reuse the code that sent by Google via SMS and passed
2-step verification!

I was wonder to know if some folks here know the validation time for the
2-step verification code that users receive through SMS not the app.

Cheers,

Amin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20140827/4452575b/attachment.html>