News for hackers. Stuff that matters.

A comment on EU government websites have undisclosed adtech trackers from Google and others. Parent comment

Re:EU government websites have undisclosed adtech trackers f... by magicalhippo on Monday March 18, 2019 @06:29PM (#19426005)
My bank has two-factor using some special applet thingy on my phone (not a regular app, it's tied into the SIM card somehow). It shows me the details (amount and destination account) which I have to confirm using my password (in combination with a key from the SIM).

Much more difficult to circumvent, assuming the user pays attention...

[ Parent | on HN ]
Re:EU government websites have undisclosed adtech trackers f... by chii on Monday March 18, 2019 @07:45PM (#19426522)
Then, the malicious script can just pop up an official looking dialog box with a message saying that they are 'testing' the confirmation system, and please accept/agree to the next sms/alert from the app.

Having direct control of the user interface is very powerful.

[ Parent | on HN ]
Re:EU government websites have undisclosed adtech trackers f... by magicalhippo on Tuesday March 19, 2019 @08:31AM (#19430128)
Of course one has to have a minimum of awareness for any protection mechanism to work.
[ Parent | on HN ]