News for hackers. Stuff that matters.

A comment on Hackers Stole Access Tokens from Okta's Support Unit. Parent comment

Re:Hackers Stole Access Tokens from Okta's Support Unit by totetsu on Friday October 20, 2023 @06:36PM (#37962249)
Amazon service just asked me to share a HAR file and I though for sure it was a security risk. Doesn’t that mean that agent has an authentication cookie to my account? Why can this be common with practice
[ Parent | on HN ]
Re:Hackers Stole Access Tokens from Okta's Support Unit by pesfandiar on Friday October 20, 2023 @06:52PM (#37962371)
Was the session still valid?
[ Parent | on HN ]
Re:Hackers Stole Access Tokens from Okta's Support Unit by tflinton on Friday October 20, 2023 @08:42PM (#37963075)
Yes, don’t share har files
[ Parent | on HN ]
Re:Hackers Stole Access Tokens from Okta's Support Unit by acdha on Friday October 20, 2023 @10:13PM (#37963482)
Yes, modulo your session durations and, for services which implement it, IP fixation. You should treat HAR files as secrets for anything involving a login.
[ Parent | on HN ]
Re:Hackers Stole Access Tokens from Okta's Support Unit by rawicki on Saturday October 21, 2023 @04:14AM (#37965024)
When I was talking to Amazon support they provided instructions on how to strip tokens together with the ask for a HAR file.
[ Parent | on HN ]
Re:Hackers Stole Access Tokens from Okta's Support Unit by totetsu on Saturday October 21, 2023 @05:16AM (#37965277)
https://repost.aws/knowledge-center/support-case-browser-har... Oh you7re right. I didn't read till the end.
[ Parent | on HN ]