3 ms·
At work, the assumption is that every non-corp web site has a key logger built in. A corp extension monitors (key logs) all input on non-corp sites, checking if
by mooman219 8y ago
At work, the assumption is that every non-corp web site has a key logger built in. A corp extension monitors (key logs) all input on non-corp sites, checking if any credentials are accidentally typed. If they are, you're notified immediately on the last key press and have to change your credentials within 7 days of the incident. I think this is a reasonable idea for security, and helps prevent some phishing schemes.
- jstanley 8y ago> At work, the assumption is that every non-corp web site has a key logger built in. A corp extension monitors (key logs) all input on non-corp sites Sounds like that assumption is well-founded!
- deleted 8y ago[deleted]
- jrockway 8y agoSaid extension is basically this: https://chrome.google.com/webstore/detail/password-alert/noondiphcddnnabmjcihcjfbhfklnnep?hl=en https://chrome.google.com/webstore/detail/password-alert/noo...
- craftyguy 8y ago> checking if any credentials are accidentally typed. Doesn't that require maintaining a database of all credentials?