4 ms·
The mitigation for that is asking you for a security question before showing you the login image and asking for password.
by yuliyp 14y ago
The mitigation for that is asking you for a security question before showing you the login image and asking for password.
- jlgreco 14y agoCan you explain how that fixes the problem? I'm not sure I understand.
- politician 14y agoIt doesn't -- at all -- the obvious workaround is to extend the middleman game a little longer and pass the user's answer to the site.
- hexagonc 14y agoIt mitigates a little. It should make you a little suspicious if the site suddenly starts complaining that you're accessing it from an unrecognized computer if you really haven't. I'd close the tab in that case.
- yuliyp 14y agoIt does in that if the real site properly stores a cookie that records that you've logged in from there before, the number of times that the user is asked for such questions goes down, increasing suspicion when the user actually IS asked for them. Security is never about 100% guarantees. It's about reducing the exploitability and impact of weaknesses.
- slovette 14y agoIt doesn't. The entire idea is seemingly cheap and ridiculous. Digital security is going to change dramatically in the near future.