Re:Hertzbleed Attack
by progval on Wednesday June 15, 2022 @02:08PM
(#31756881)
untrustworthy server that runs malicious JS: potentially half the links one clicks on HN or Reddit
short secrets which aren't mitigated by MFA: session cookies, TLS client certificates, secret keys of e2ee IM apps (eg. Element), Zerobin URLs, ... Maybe even TLS session keys?
short secrets which aren't mitigated by MFA: session cookies, TLS client certificates, secret keys of e2ee IM apps (eg. Element), Zerobin URLs, ... Maybe even TLS session keys?