News for hackers. Stuff that matters.

A comment on Hackers used Slack to break into EA Games.

[dead]
Re:Hackers used Slack to break into EA Games by mcraiha on Friday June 11, 2021 @01:23PM (#27476072)
I would assume that same kind of attack vector would work via Teams, Discord etc.
[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by grumple on Friday June 11, 2021 @03:53PM (#27477679)
I would not make that assumption if they use proper security practices.

You can make cookies unusable (or harder to use) by anyone but the initial owner a few different ways. You could include a hardware or ip fingerprint in the cookie that has to be validated server side, for example. You can time out cookies after an hour. Etc.

[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by no-dr-onboard on Friday June 11, 2021 @01:33PM (#27476224)
What do you use instead?
[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by mrlonglong on Friday June 11, 2021 @07:47PM (#27479898)
Nothing, I just don't like slack.
[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by rednerrus on Friday June 11, 2021 @01:59PM (#27476535)
Carrier Pigeons.
[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by tailspin2019 on Friday June 11, 2021 @02:35PM (#27476951)
Ahh. CPaaS
[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by cecilpl2 on Friday June 11, 2021 @03:26PM (#27477440)
It uses IPoAC.
[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by klhutchins on Friday June 11, 2021 @02:38PM (#27476978)
smoke signals
[ Parent | on HN ]