4 ms·
The token could be made only usable by the cli process that asked for it (should be really).
by dinosaurdynasty 4y ago
The token could be made only usable by the cli process that asked for it (should be really).
- Thorrez 4y agoYes, but that doesn't stop this attack. 1. Attacker runs the cli process to generate the URL 2. Attacker sends the URL to the victim saying "as a second factor verification, you need to copy this code into this form" 3. Victim does it 4. Attacker enters the code into the original cli process