Ō̴̡̨͍͕̠̹̘͖͓̭̝̰̖͉̬̫͍̝̰̟͖͖̞͇̟̻̫͇̠̯̋̋̂ͅͅA̷̡̧͎̫̬͖̠͍̼̗̠͊̉̏̓̈́̂̀̈́͆͘͜uth @oktadev oauth.wtf oauth.net 🎥 livestreaming youtube.com/aaronpk aaronpk.tv 💛 #indieweb 🐘🦋
Portland, Oregon
Joined April 2008
- Tweets 11,388
- Following 1,223
- Followers 6,415
- Likes 9,609
I just might do that haha. The shirt i'm wearing today says "I find your lack of security disturbing"
2
tbh it's like the "security" involved in writing checks, it's best if you don't think too much about it
1
1
The browser doesn't have access to the MAC. Google *could* (and probably is) checking the IP address, but it's all heuristics because your IP address may change at any time, e.g. cell phones have very unstable IPs, hop in a plane and land with an IP from another country, etc.
💯
There aren't really any other tools browsers can use for this right now. The process of logging in looks like basically: you type your password in google, google gives you back a cookie, your browser makes a request with that cookie and the server knows who it's for.
1
Interestingly that doesn't even matter for this since it wasn't the "normal" phishing style attack. Don't open files you download is the only safe thing, or open them on a machine that isn't logged in to anything. That obvs isn't practical, so it's a lot harder in practice.
1
No, the cookies are how the browser is logged in to google. No passwords needed, 2fa doesn't matter. I'm thinking I might need to make a video on this.
2
2
It was a windows executable disguised as a .scr file, no keylogger needed for this, it was able to pick up the browser cookies from the hard drive. It could have happened on Mac just as easily.
1
1
I was gonna ask how you're doing with all the fires nearby! Couldn't remember how close you are to that area
1
1
fun fact not even fax machines are safe from viruses blog.checkpoint.com/2018/08/…
omg what a mess! So sorry this is happening to you! If you aren't completely overwhelmed I'd love to help get to the bottom of how this happened. Online security is my jam. Feel free to DM me.
5
I use a teleprompter about 50% of the time, writing a script takes so long I just skip that and jump straight to recording sometimes.
I do just one take off the prompter though, I don't think it comes off looking like I'm reading.
1
2