3 ms·
And presumably a halfway skilled attacker could proxy requests to the real site and send the user their actual image. So this only works if we assume the bad gu
by eli 10y ago
And presumably a halfway skilled attacker could proxy requests to the real site and send the user their actual image. So this only works if we assume the bad guys are lazy and the users are incredibly perceptive.
- benmanns 10y agoSee 2FA proxying in LostPass https://github.com/cxxr/lostpass https://github.com/cxxr/lostpass