3 ms·

Hypothetically speaking, you can still be MitM'ed.

• Etheryte 2y ago
  And then what, serve me fake Disco Elysium dialogs? What's the threat model?
  • sedatk 2y ago
    Either pick one of the recent JavaScript sandbox escape CVEs on a vulnerable browser, or redirect to your phishing page as to your liking. Again, hypothetical and very unlikely, but the risks are there.
    • Etheryte 2y ago
      They could do all of this without mitming by just making a submission on HN. The extra step doesn't add anything.
      • sedatk 2y ago
        Then why don't they, do you think?
        • valicord 2y ago
          Because it's a made up threat that only exists in your imagination?