3 ms·
It already is a server-side thing. This post shows how to steal that session/token/ticket after the authentication step. What are you proposing?
by gcr 13y ago
It already is a server-side thing.
This post shows how to steal that session/token/ticket after the authentication step.
What are you proposing?
- tlrobinson 13y agoIn that case this is no worse than stealing a cookie for a site which required 2FA, which presumably requires local access.