Nemeski@lemm.ee to Technology@lemmy.worldEnglish · 8 months agoOver 5,300 GitLab servers exposed to zero-click account takeover attackswww.bleepingcomputer.comexternal-linkmessage-square41fedilinkarrow-up128arrow-down10
arrow-up128arrow-down1external-linkOver 5,300 GitLab servers exposed to zero-click account takeover attackswww.bleepingcomputer.comNemeski@lemm.ee to Technology@lemmy.worldEnglish · 8 months agomessage-square41fedilink
minus-squareBaines@lemmy.worldlinkfedilinkEnglisharrow-up1·edit-28 months agodon’t even have to lose the device phone is the most common, plenty of ways in from mitm attacks (insecure wifi for example) to social eng the account phone provider guess you could go the dongle route but if it was super common thieves would just target them
minus-squareasdfasdfasdf@lemmy.worldlinkfedilinkEnglisharrow-up1·8 months agoI think the question is less about getting hacked and more about getting permanently locked out of your account.
minus-squareBaines@lemmy.worldlinkfedilinkEnglisharrow-up2·8 months agosure but it shouldn’t be, any good process will have some recovery method course that can be a vulnerability as well thank god recovery questions are dead
don’t even have to lose the device
phone is the most common, plenty of ways in from mitm attacks (insecure wifi for example) to social eng the account phone provider
guess you could go the dongle route but if it was super common thieves would just target them
I think the question is less about getting hacked and more about getting permanently locked out of your account.
sure but it shouldn’t be, any good process will have some recovery method
course that can be a vulnerability as well
thank god recovery questions are dead