News for hackers. Stuff that matters.

A comment on I lost €4k in a Facebook scam. Parent comment

Re:I lost €4k in a Facebook scam by andybak on Monday September 14, 2020 @03:28PM (#24474098)
> so I can only assume it was a real Facebook oauth flow,

another reason why we should be training users to only do oAuth in a browser with a password manager.

It's one last solid line of defence.

OAuth in a native app is a security risk.

[ Parent | on HN ]
Re:I lost €4k in a Facebook scam by donmcronald on Monday September 14, 2020 @04:32PM (#24474803)
That's not a silver bullet though. If the password manager does a poor job of domain matching, the user gets accustomed to having to manually search for logins once in a while.
[ Parent | on HN ]
Re:I lost €4k in a Facebook scam by andybak on Monday September 14, 2020 @09:15PM (#24476936)
Agreed. Not perfect but much better than nothing.
[ Parent | on HN ]