@[email protected]cake to lemmy.ml [email protected] • 2 years agoI'm going to assume the admins here all have 2FA on their accounts, right?message-square26fedilinkarrow-up157
arrow-up155message-squareI'm going to assume the admins here all have 2FA on their accounts, right?@[email protected]cake to lemmy.ml [email protected] • 2 years agomessage-square26fedilink
minus-squareThe Tuxlinkfedilink10•2 years agoYeap, that is the first thing you do for any privileged account.
minus-square@[email protected]linkfedilink8•2 years agoIt doesn’t matter if they are directly stealing cookies though.
minus-squareThe Tuxlinkfedilink3•2 years agoHmm, that is the reason you should have addons in your browser to prevent XSS, like uBlock.
minus-squareThe Tuxlinkfedilink3•2 years agoIt blocks bunch of JS from being executed, and if it detects XSS, it gives you a popup to inform you.
minus-square@[email protected]linkfedilink8•2 years agoAre you thinking of NoScript? That’s what gives me the XSS popups.
Yeap, that is the first thing you do for any privileged account.
It doesn’t matter if they are directly stealing cookies though.
Hmm, that is the reason you should have addons in your browser to prevent XSS, like uBlock.
uBlock prevents XSS? I didn’t know that.
It blocks bunch of JS from being executed, and if it detects XSS, it gives you a popup to inform you.
Are you thinking of NoScript? That’s what gives me the XSS popups.
Ah, you are correct, My coffee hasn’t kicked in yet.