2FA, was A Deep Dive on the Recent Widespread DNS Hijacking

• Previous message (by thread): 2FA, was A Deep Dive on the Recent Widespread DNS Hijacking
• Next message (by thread): 2FA, was A Deep Dive on the Recent Widespread DNS Hijacking
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, Feb 26, 2019 at 9:56 PM Keith Medcalf <kmedcalf at dessus.com> wrote:
> I did write my own TOTP client.  However, why do you assume that I am talking about a TOTP client and not the referred webpage which requires the unfettered execution of third-party (likely malicious) javascript in order to view?  Not to mention requiring the use of (also quite possibly malicious) downloaded fonts?

Well, because:
1. the page's <noscript> tag points to the github repo which contains
the raw data in a fairly readable form; and
2. the page works fine in Lynx despite the warning.

• Previous message (by thread): 2FA, was A Deep Dive on the Recent Widespread DNS Hijacking
• Next message (by thread): 2FA, was A Deep Dive on the Recent Widespread DNS Hijacking
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]