News for hackers. Stuff that matters.

A comment on LastPass bug leaks credentials from previous site. Parent comment

Re:LastPass bug leaks credentials from previous site by dsissitka on Monday September 16, 2019 @02:08PM (#20986916)
> there are ways to spoof what the current website is, causing your context-aware password manager to spit out data it shouldn't.

Can you give an example?

[ Parent | on HN ]
Re:LastPass bug leaks credentials from previous site by zarify on Monday September 16, 2019 @06:29PM (#20989184)
There was this example from 2017. https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-u...

I seem to remember reading about similar stuff done elsewhere, but don't remember the details (or apparently a useful search term :P).

[ Parent | on HN ]
Re:LastPass bug leaks credentials from previous site by kerng on Monday September 16, 2019 @09:51PM (#20990434)
Isn't the XSS example highlighted here a good example?
[ Parent | on HN ]