Redirecting you to Reddit in 5 seconds:

https://old.reddit.com/r/netsec/comments/1dcd0ge/unsecure_timebased_secret_and_sandwich_attack