Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
gruez
on June 5, 2019
|
parent
|
context
|
favorite
| on:
Firefox Now Available with Enhanced Tracking Prote...
If the attacker manages to get malware on the mac, they can also wait for you to do a login, and steal your 2fa code as you enter it.
ViViDboarder
on June 5, 2019
[–]
Or just steal your session tokens. Not all apps are secure enough to prevent session roaming.
dwaite
on June 5, 2019
|
parent
[–]
Or just remote drive your session. Token exfiltration isn't required if you can do XSS or say script injection via browser extensions (and exfiltration is more likely to hit anomaly/fraud detection)
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
