4 ms·
It's pretty common as an account hijacking vector, right? Hackers tell non-techies to paste things into the console, which can then share cookies or access tok
by moduspol 4y ago
It's pretty common as an account hijacking vector, right?
Hackers tell non-techies to paste things into the console, which can then share cookies or access tokens with the attacker.
Obviously the browser is "owned" by the client, so a sufficiently motivated techie could bypass this any number of ways. But it prevents some number of non-techies from security issues.
- ars 4y agoYou can print debug messages to the console to warn people. The website has no idea if they opened it or not. But here, it seems they are detecting if the window is resized! That's just crazy.
- is_true 4y agoIn that case you take Facebook 's route and show a message when you open the console.