Supposing I want to brute force a numeric code?
I can guess codes per
At any given time codes are valid.
Codes have digits in them.
I want to know how long before I'm logged in with a percent probability.
It'll take about:
Don't be fooled: the "changing code" in TOTP doesn't provide brute force protection.