3 ms·
Also, I’m also surprised an XSS attack like hasn’t yet been actually used to harvest credentials like passwords through browser autofill[0]. It seems like the
by varun_ch 8mo ago
Also, I’m also surprised an XSS attack like hasn’t yet been actually used to harvest credentials like passwords through browser autofill[0].
It seems like the worm code/the replicated code only really attacks stuff on site. But leaking credentials (and obviously people reuse passwords across sites) could be sooo much worse.
[0] https://varun.ch/posts/autofill/ https://varun.ch/posts/autofill/
- af78 8mo agoTime to add 2FA...
- stephbook 8mo agoChrome doesnt actually autofill before you interact. It only displays what it would fill in at the same location visually.
- varun_ch 8mo agobut any interaction is good for Chrome, like dismissing a cookie banner
- hrmtst93837 8mo ago[flagged]