hal0x2328

5 ms·

1. 1.▲
   by hal0x2328 2y ago

   Have you looked at PlantUML?
2. 2.▲
   by hal0x2328 2y ago

   It's time to stop using TOTP, it's vulnerable to AitM phishing. Use FIDO2 hardware keys or passkeys instead.
3. 3.▲
   by hal0x2328 2y ago

   It's very easy to fall prey to an Evilginx or similar AITM phishing attack. Passkeys or TLS client certificates are the only guaranteed defense. Relying on the user noticing the different domain or the lack of autofill by the password
4. 4.▲
   by hal0x2328 5y ago

   Betteridge's law of headlines says no.