If the client knows to use the time of day then an attacker also does.

This is exactly the same: the seeded hash is the password.