Global Feed Post Login
Replying to Avatar DETERMINISTIC OPTIMISM 🌞

"Login with Google" Pwn, boy this will be probably one of the biggest hacks in history...

AFAIK, attackers were able to fool google into thinking they owned your domain, some DNS attack or business logic flaw. Then signup for google workspace with your domain, then go and login into any service that had "Login with Google"...

That's as thirsty one

DNS is a shitcoin too.

Seeing some reports on twitter that seems to validate this. No public comms yet.

Avatar
euclid 1y ago

when the security of the whole internet is vested in one corporation 😞

Reply to this note

Please Login to reply.

Discussion

No replies yet.