Post AMQMFX87UMtkY1ZdqK by dcid@noc.social
 (DIR) More posts by dcid@noc.social
 (DIR) Post #AMQMFX87UMtkY1ZdqK by dcid@noc.social
       2022-08-11T16:14:29Z
       
       0 likes, 1 repeats
       
       Great details on how Cisco got hacked. 1- Personal Google account of an employee gets compromised - it has password synced enabled. 2- Got all the employee's passwords, including their Cisco VPN credentials.3- Phishing to accept 2FA4- They are inhttps://blog.talosintelligence.com/2022/08/recent-cyber-attack.html
       
 (DIR) Post #AMRJ4knWE7ih314AAS by iron_bug@friendica.ironbug.org
       2022-08-11T18:25:21Z
       
       0 likes, 0 repeats
       
       use Google authorization, they said... c'mon, how much shit must happen before people come to a simple conclusion that all that 2FA and single authorization services are total bullshit and a hole in security number one.
       
 (DIR) Post #AMRJ4lFWY07aRsAWoq by lxo@gnusocial.net
       2022-08-12T00:31:10Z
       
       0 likes, 0 repeats
       
       I'm told google login web page now requires javascript.  yet another hole in the already porous browser security waiting to be exploited and abused.  will they never learn?
       
 (DIR) Post #AMRJ4leh2QFphvwd3A by Suiseiseki@freesoftwareextremist.com
       2022-08-12T03:39:54.261984Z
       
       0 likes, 0 repeats
       
       @lxo I'm pretty sure that such was changed years ago.
       
 (DIR) Post #AMRM90Uw5xpelJ5stk by lxo@gnusocial.net
       2022-08-12T04:06:29Z
       
       0 likes, 0 repeats
       
       I have it from a reliable source that it was possible to log in while using text-based javascript-less browsers as of a few months ago, which is no longer the case
       
 (DIR) Post #AMRM90xeNCniCMWoee by Suiseiseki@freesoftwareextremist.com
       2022-08-12T04:13:54.275601Z
       
       0 likes, 0 repeats
       
       @lxo Huh, I guess google likes to do some trickery when it knows your browser can actually run JavaScript.
       
 (DIR) Post #AMRNW9vjICxCd7EK4O by lxo@gnusocial.net
       2022-08-12T04:19:56Z
       
       0 likes, 0 repeats
       
       that doesn't seem relatable; it broke on browsers that can't run JavaScript
       
 (DIR) Post #AMRNWAQvQDuKBrpEh6 by Suiseiseki@freesoftwareextremist.com
       2022-08-12T04:29:42.475250Z
       
       0 likes, 0 repeats
       
       @lxo A few months ago, I opened up the google login page in firefox without JavaScript enabled, but I got no login forms.As you said that it was possible to log in without it a few months ago, I figured that if I remembered correctly, google must have been doing some trickery for browsers that can run JavaScript.I guess it doesn't really make any difference anymore, as it's now broken no matter what.