News for hackers. Stuff that matters.

A comment on Hackers used Slack to break into EA Games. Parent comment

Re:Hackers used Slack to break into EA Games by mcraiha on Friday June 11, 2021 @01:23PM (#27476072)
I would assume that same kind of attack vector would work via Teams, Discord etc.
[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by grumple on Friday June 11, 2021 @03:53PM (#27477679)
I would not make that assumption if they use proper security practices.

You can make cookies unusable (or harder to use) by anyone but the initial owner a few different ways. You could include a hardware or ip fingerprint in the cookie that has to be validated server side, for example. You can time out cookies after an hour. Etc.

[ Parent | on HN ]