packtreefly

8 ms·

1. 31.▲
   by packtreefly 2y ago

   All it is doing is opening a new tab when the user clicks a button, then closing that tab. The JavaScript that replaces the cookie comes from the site itself. I'm sure there's an API call that happens inside the extension to look
2. 32.▲
   by packtreefly 2y ago

   > although I was worried that folks are too locked in to SaaS stuff For some people the cloud is straight magic, but for many of us, it just represents work we don't have to do. Let "the cloud" manage the hardware and you
3. 33.▲
   by packtreefly 2y ago

   There are some obvious, significant benefits I can think of off the top of my head: - Passkeys give the website no secret to keep. Breach of the passkey public key is not an event worthy of credential rotation. - Passkey authentication is s
4. 34.▲
   by packtreefly 2y ago

   The glaring common denominator here is that the attacker has the ability to send an unprompted, unblockable request to the victim's phone. Pressing the safe-looking green button that shows up, even accidentally, is digital suicide. Goo