3 ms·
Phishing platforms, infostealers blamed as identity attacks soar
- FidoTheDog 1y agoPasskeys solve this-Oh wait. Malware can just steal cookies and ne'er-do-wells can read access tokens from localStorage with XSS. Edit: Experts, please show how passkeys prevent local cookie theft by infostealer malware and cross-site scripting attacks targeting long-lived auth tokens in localStorage (which isn't subject to HttpOnly/Secure restrictions).
- deleted 1y ago[deleted]