Re:Harvesting credit card numbers and passwords from websites
by cesarb on Saturday January 06, 2018 @05:02PM
(#16087724)
That's the same as protecting just the login page with https. What prevents code outside the form page from replacing the link which goes to the form page?
[ Parent
| on HN ]
Re:Harvesting credit card numbers and passwords from websites
by martin-adams on Sunday January 07, 2018 @02:35PM
(#16092211)
Exactly my thought. I guess that would mean it would need some intimate knowledge of the target site this reducing the scalability of the attack. But then again, thee are some clever people out there who could automate it.