3 ms·
If you give your otp to a phishing site, it might not login again, but it can retain this session cookie for as long as it's valid and use it for access all tha
by GoblinSlayer 4y ago
If you give your otp to a phishing site, it might not login again, but it can retain this session cookie for as long as it's valid and use it for access all that time.
- Jnr 4y agoOn https://github.com/settings/security https://github.com/settings/security you can revoke other sessions.
- vladvasiliu 4y agoBut you have to specifically go looking for this. GitHub doesn't notify you when you open a new session from an unknown browser.
- totetsu 4y agoI'm always glad when the cookie I hard coded into my bash script curl command still works a year later.