logoalt Hacker News

ghshephardtoday at 2:21 AM2 repliesview on HN

Worst case it gets access to gmail. And Github. And the Internet. I'm increasingly appreciating the importance of a physical finger-press on Yubikey to trigger the FIDO2 + OIDC Auth. I don't think there is an easy way for it to hack a new session.


Replies

andoandotoday at 4:25 AM

How is it going to get access to gmail or github? In any case, whats the probability of it going to so completely off the rails that it does something horrendous with gmail/github? Whats it going to do? Email my coworkers nudes on my computer? Make my github profile public?

show 3 replies
SoftTalkertoday at 3:29 AM

It should run as a separate user account with its own home directory. Not with access to your personal browser profile.

show 1 reply