Re:We don't allow users to pick passwords so we don't store ...
by maxdamantus on Friday December 06, 2019 @08:26PM
(#21727812)
> I mean, they already demonstrated incompetency. Finding more vulnerabilities at this point is very much expected.
You mean they've demonstrated that their security model is non-traditional? The point is that the CSRF login is probably a more significant attack vector, and many sites are vulnerable to such an attack.
Did you know the website you're using right now is vulnerable to a CSRF login attack? [0]
You mean they've demonstrated that their security model is non-traditional? The point is that the CSRF login is probably a more significant attack vector, and many sites are vulnerable to such an attack.
Did you know the website you're using right now is vulnerable to a CSRF login attack? [0]
[0] https://maxdamantus.github.io/yccsrf.html