This requires all authentication codes to be sent to the attacker in the first place. Why wouldn't they just put the code in themselves at that point?
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: