Re:Domain Matching 2FA
by joskvw on Saturday June 10, 2023 @11:14AM
(#36271229)
That's a really good post, interesting read. This is similar in some ways but I don't see how their approach protects the user from more advanced attacks (an attacker could still swap the captcha).
https://shufflingbytes.com/posts/ripping-off-professional-cr...