How Hackers Bypass MFA! - (Multi-Factor Authentication) 

You're right on virtually all sites, but you'd be surprised. I'd say I come across a lack of rate-limiting quite often while doing pentesting. That said, most OTPs are at least 6 digits (as you noted). The problem is when companies try to spin up their own MFA service with insecure coding - but definitely not likely today. TryHackMe made the OTP simple on purpose to help people understand the core issues that COULD happen with MFA :)

Shhh don't tell anyone

​@TylerRamsbey can you help me get my psn account back till pay and the reason being a hacker hacked my psn account and used a 2sv that I never used ill pay if so

@@althegamer6606 lol no

@@TylerRamsbey why ?