4 ms·

Wouldn’t multi-account containers, or using private windows segmented to only one website solve it? Don’t open a private window and log in to multiple things…

• jamiek88 3y ago
  Don’t ever make a mistake is what you are saying there. That’s borderline impossible for humans.
  • hedora 3y ago
    Or, use a web browser that doesn’t support any cross site state, at all. I’d love to have such a browser, and to disable the browser that came with my phone, but does not have this property. (Things like firefox focus or the duck duck go browser for iOS try to do this; I’m not sure if they succeed, but they should protect against the attack described in the article, at least.)