nonexertion comments on I'm going to assume the admins here all have 2FA on their accounts, right?

[–] nonexertion@lemmy.run 0 points 3 years ago (1 child)

Yeap, that is the first thing you do for any privileged account.

[–] cpp@sh.itjust.works 0 points 3 years ago (1 child)

It doesn't matter if they are directly stealing cookies though.

parent

[–] nonexertion@lemmy.run 0 points 3 years ago (1 child)

Hmm, that is the reason you should have addons in your browser to prevent XSS, like uBlock.

parent

[–] cpp@sh.itjust.works 0 points 3 years ago (1 child)

uBlock prevents XSS? I didn't know that.

parent

[–] nonexertion@lemmy.run 0 points 3 years ago (1 child)

It blocks bunch of JS from being executed, and if it detects XSS, it gives you a popup to inform you.

parent

[–] cpp@sh.itjust.works 1 point 3 years ago

Are you thinking of NoScript? That's what gives me the XSS popups.

parent

lemmy:	0.19.20
mlmym (mschae):	26.3.3