How passwords and logins work: why a website should not know your password
Session hijacking: what a thief can do with a stolen login cookie
You have a strong password, a code on your phone and a passkey. A thief can still get past all of them. He only needs one small file that your browser keeps: a cookie you never see.
-
1
A free training plan for climbers lands in your inbox, and you open the file. It is a program in disguise, and it starts running on your laptop.
-
2
You see nothing happen. The program copies the cookies of your browser and sends them to Rono.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88