Profile Image

Joanna Rutkowska

@rootkovska ↗

Deleted No
Hibernated No
Last Checked Nov. 19, 2022

Created

Sat Feb 18 10:42:00 +0000 2017

Likes

5

Retweets

2

Source

TweetDeck

View Raw Data

JSON Data

View on Twitter

Likely Available
Profile Image

Joanna Rutkowska @rootkovska

1. trigger a browser not allowed to get credentials from 2FA to my PayPal, so no problem the website is named https://t.co/fO9mpNfvt0, or: — PolitiTweet.org

Posted Feb. 18, 2017

Preceded By

Profile Image

Joanna Rutkowska @rootkovska

Instead, the OS should enforce 2FAs only to defined apps/domains. This way the phishing attempt can either: — PolitiTweet.org

Posted Feb. 18, 2017

Followed By

Profile Image

Joanna Rutkowska @rootkovska

2. trigger a trusted browser (e.g. for Paypal), which the OS enforces can only connect to https://t.co/CDDnJ8FObV over HTTPS. So, ok. — PolitiTweet.org

Posted Feb. 18, 2017