4 ms·
> If an attacker gains access to your server, they can just inject javascript to gain access to whatever they want on the client's browser. That's a little com
by ffpip 6y ago
> If an attacker gains access to your server, they can just inject javascript to gain access to whatever they want on the client's browser.
That's a little complicated right and out of the threat model of normal users no?
They mean to say if someone hacks into server and just copies the data, they will just have random nonsense.
For the javascript thing to work, you need to login after the server is compromised. And if they haven't realised their server is compromised by then, you shouldn't use them.
- codezero 6y agoA few things: I think the "average" proton user is super technical and cares about this thing, or they wouldn't use it in the first place. The threat model is likely law enforcement - they can "compromise" a server legally and restrict owners from notifying people, and have done so many times in the past.