for anyone still working to defend https, i'm confirming 2FA requests tonight.
tell me how https could have prevented this attack, and explain HOW THE EXPLOIT FUCKING MATTERED.
bankofamerica
username: payfrit
password (still unchanged, consult your history you dumb mf)
come on script kiddies. show me what you got.
come steal my money. i will fucking ruin you.
bring it.
here come da reports, massah!!!
tell me how you got my password in the first place, without me providing it to you in clear text.
tell me how you got my username. oh wait, i gave you that in cleartext also, on a public, worldwide networking protocol.
tell me how you got through my 2FA. did you convince some dumb motherfucker providing live support on a network that you still don't even know of? are you rolling those dice, for a prize you can't even yet define?
did it cost you less than $100, you fucking ingrate?!
