4 ms·
untrustworthy server that runs malicious JS: potentially half the links one clicks on HN or Reddit short secrets which aren't mitigated by MFA: session cookies
by progval 4y ago
untrustworthy server that runs malicious JS: potentially half the links one clicks on HN or Reddit
short secrets which aren't mitigated by MFA: session cookies, TLS client certificates, secret keys of e2ee IM apps (eg. Element), Zerobin URLs, ... Maybe even TLS session keys?