3 ms·
An attacker can show the user a page identical to PayPal's and convincingly ask them for their credentials. The submission would send the credentials to the att
by gberger 13y ago
An attacker can show the user a page identical to PayPal's and convincingly ask them for their credentials. The submission would send the credentials to the attacker.
- tokenizerrr 13y agoYeah, but that seems to be different from code execution. https://news.ycombinator.com/item?id=7493849 https://news.ycombinator.com/item?id=7493849 seems to be closer to the truth.