Comment on This is why we have two-factor authentication.

• MrKoyun@lemmy.world ⁨2⁩ ⁨months⁩ ago

  I mean, we have https now. Also VPNs.

  source

  • diabetic_porcupine@lemmy.world ⁨2⁩ ⁨months⁩ ago

    You can always use pihole to mess with your local dns and resolve to a fake website that looks like your social media of choice and collect their password

    source

    • Anivia@feddit.org ⁨2⁩ ⁨months⁩ ago

      Only if the user ignores the “unsafe connection” warning in the browser, since you won’t have an SSL certificate for the domain

      source

      • diabetic_porcupine@lemmy.world ⁨2⁩ ⁨months⁩ ago

        Hmm good point… you would need the ca to sign off on it self signed doesn’t work… it’s just a file though right? Couldn’t you rip it from the real server?

        source

        • -> View More Comments
• lost_faith@lemmy.ca ⁨2⁩ ⁨months⁩ ago

  lol, warned 2 guys I worked with not to use the starbucks free wifi or any free wifi. One of them had their bank info compromised, the other had their google compromised.

  source

  • guy@piefed.social ⁨2⁩ ⁨months⁩ ago

    VPN ffs

    source

    • lost_faith@lemmy.ca ⁨2⁩ ⁨months⁩ ago

      At the time, when I warned against it, I was told that I was too paranoid. Guess I wasn’t as paranoid as they thought

      source