Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Auth0 Glitch Allows Attackers to Launch Phishing Attacks. Parent comment
"malicious-service-a.com" spoofing "service-a.com" is different than "eu.auth0.com" spoofing "au.auth0.com".
In the second case both domains are valid auth0 domains. This makes it harder for a user to detect the phishing. This seems like a legitimate concern.
There are no comments on this comment yet.
"malicious-service-a.com" spoofing "service-a.com" is different than "eu.auth0.com" spoofing "au.auth0.com".
In the second case both domains are valid auth0 domains. This makes it harder for a user to detect the phishing. This seems like a legitimate concern.