3 ms·
Wouldn't that just log you in on the browser doing the clicking, instead of the attackers browser?
by vanviegen 2y ago
Wouldn't that just log you in on the browser doing the clicking, instead of the attackers browser?
- szszrk 2y agoYou mean in the booking example? They logged in the browser that... requested access. So basically anyone that knew your login/email. I think it should check if browser requesting is the same as the one confirming, or just drop that whole dumb mechanism entirely.