News for hackers. Stuff that matters.

hal0x2328

Re:Vizdom: Diagrams as Code on Sunday September 01, 2024 @06:42PM (#41421011)
Have you looked at PlantUML?
Re:TOTP tokens on my wrist with the smartest dumb watch on Saturday July 27, 2024 @10:17AM (#41086760)
It's time to stop using TOTP, it's vulnerable to AitM phishing. Use FIDO2 hardware keys or passkeys instead.
Re:Passkeys: A Shattered Dream on Friday April 26, 2024 @07:42AM (#40168150)
It's very easy to fall prey to an Evilginx or similar AITM phishing attack. Passkeys or TLS client certificates are the only guaranteed defense. Relying on the user noticing the different domain or the lack of autofill by the password manager, not so much.
Betteridge's law of headlines says no.