Comment by alpineman
7 days ago
Yes. Leaking a password via a photo is completely different from leaking a 30-60 second TOTP.
Someone would need to:
1. Request the TOTP
2. Stand up and walk back
3. Take a photo of their desk with the TOTP visible
4. Send it to someone who can use it
All within 30-60 seconds. Just such an edge case it's not even worth thinking about.
[dead]