News for hackers. Stuff that matters.

A comment on Ask HN: Locked out of Amazon accounts for a month.

Re:Ask HN: Locked out of Amazon accounts for a month by bradknowles on Saturday July 30, 2022 @09:46PM (#32292366)
The unfortunate thing is that something like a Tampermonkey script that was loaded in your browser could cause that kind of event, and capture your new password and transmit that to a third party, where the e-mail address and everything else could be changed.

But tools like Greasemonkey and Tampermonkey are the good guys. They tell you when scripts are updated, etc.... Malware versions of comparable tools could operate entirely below the surface, without your ever knowing.

[ Parent | on HN ]
Re:Ask HN: Locked out of Amazon accounts for a month by nikolay on Sunday July 31, 2022 @02:00AM (#32293549)
That's why I don't use any such tools and I'm extremely careful when I approved the few extensions from verified sources I use in the browser. But I am fully aware of the supply chain attacks so Grammarly, for example, and 1Password could also potentially inject malware.
[ Parent | on HN ]