#1265709 Lack of bruteforce protection for TOTP 2FA

https://hackerone.com/reports/1265709