Re:We handled a recent phishing incident that targeted Dropbox
by jakub_g on Tuesday November 01, 2022 @01:58PM
(#33424856)
The domains mess at Microsoft is truly hilarious. MS Edge browser fetches some updates from something.skype.com IIRC.
Re:We handled a recent phishing incident that targeted Dropbox
by e40 on Tuesday November 01, 2022 @02:54PM
(#33425763)
And the crazy part are all the redirects that happen, and with delays (often evident) you can watch them happen in real time. Why is this a problem? Because it completely confuses password managers and whitelisting in uBlock Origin, et al.
A complete shitshow.
Re:We handled a recent phishing incident that targeted Dropbox
by TeMPOraL on Tuesday November 01, 2022 @03:29PM
(#33426216)
And then, after 30 seconds of watching the redirects, you finally reach a page that says... "your tenant ${uuid} cannot access resource ${uuid} on realm ${uuid}, sorry".
Re:We handled a recent phishing incident that targeted Dropbox
by Semaphor on Tuesday November 01, 2022 @03:13PM
(#33425981)
Microsoft and naming issues. That's one iconic duo.
Re:We handled a recent phishing incident that targeted Dropbox
by tedunangst on Tuesday November 01, 2022 @03:37PM
(#33426348)
Sometimes their services don't talk to each other, but you can step in and fill the gap!
https://www.ghacks.net/2019/04/17/microsoft-lost-control-ove...
I also regularly get XSS warning from the myriad login domains that they pass credentials through in their web portals.
Sometimes I wonder how their services are set up to talk to each other, I'm sure it's a terrifying Gordian knot.