Forum Overview :: Hacker
 
Bank of America and the problem with that by The Happiness Engine 06/15/2020, 4:45pm PDT
All a bad actor has to do is proxy your request, load the login page with your emu, and then grab the password.

Separate: my two-factor work login shows me a "special image" once I type in my username but before I submit my password. That is literally an enumeration attack allowing me to check every possible valid user on the system, but it doesn't matter because usernames are firstname.lastname.
PREVIOUS NEXT REPLY QUOTE
 
Mankind's ability to screw up a logon screen is limitless. A thread. by Ice Cream Jonsey 06/15/2020, 9:02am PDT NEW
    Unnamed bank - wild animal security avatar by Ice Cream Jonsey 06/15/2020, 2:38pm PDT NEW
        Bank of America and the problem with that by The Happiness Engine 06/15/2020, 4:45pm PDT NEW
            I actually like the idea of the website validating itself, but it won't happen by blackwater 07/02/2020, 10:15pm PDT NEW
    Mortgage website by Ice Cream Jonsey 07/02/2020, 6:31am PDT NEW
        Re: Mortgage website by laudablepuss 07/02/2020, 11:25am PDT NEW
            Webshits can't understand input validation, which was solved by 2005. NT by The Happiness Engine 07/02/2020, 4:04pm PDT NEW
    Why would anyone conceal the MFA code in your login screen? by laudablepuss 07/09/2020, 8:32am PDT NEW
        Re: Why would anyone conceal the MFA code in your login screen? by Quentin Beck, worst Caltrops Poster 07/09/2020, 9:12am PDT NEW
    I am Hackerman. NT by Hackerman 07/21/2020, 2:09pm PDT NEW
    Windows 10 login pin by Micro$loth WinBLOWS 07/26/2020, 8:19am PDT NEW
        If you don't want logins on your win 10 home PC, unplug the internet. Seriously. by MM 07/26/2020, 8:33am PDT NEW
            Heed MMs Hacker Tip of the Day by OTG 07/26/2020, 9:59am PDT NEW
 
powered by pointy