this post was submitted on 10 Jul 2023
2 points (100.0% liked)

lemmy.ml meta

1406 readers
1 users here now

Anything about the lemmy.ml instance and its moderation.

For discussion about the Lemmy software project, go to !lemmy@lemmy.ml.

founded 3 years ago
MODERATORS
nutomic@lemmy.ml
2
I'm going to assume the admins here all have 2FA on their accounts, right? (lemmy.ml)
submitted 1 year ago by tryagain@lemmy.ml to c/meta@lemmy.ml
6 comments fedilink hide all child comments
 

Right guys?

you are viewing a single comment's thread
view the rest of the comments
[–] nonexertion@lemmy.run 0 points 1 year ago (1 children)

Yeap, that is the first thing you do for any privileged account.

[–] cpp@sh.itjust.works 0 points 1 year ago (1 children)

It doesn't matter if they are directly stealing cookies though.

[–] nonexertion@lemmy.run 0 points 1 year ago (1 children)

Hmm, that is the reason you should have addons in your browser to prevent XSS, like uBlock.

[–] cpp@sh.itjust.works 0 points 1 year ago (1 children)

uBlock prevents XSS? I didn't know that.

[–] nonexertion@lemmy.run 0 points 1 year ago (1 children)

It blocks bunch of JS from being executed, and if it detects XSS, it gives you a popup to inform you.

[–] cpp@sh.itjust.works 1 points 1 year ago

Are you thinking of NoScript? That's what gives me the XSS popups.