• 0 Posts
  • 231 Comments
Joined 2 年前
cake
Cake day: 2023年7月3日

help-circle

  • ADTJtomemes@lemmy.worldI hate whoever that was
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    12 天前

    if you don’t want to or can’t use extensions, just right click > inspect on the password field, then right click the element highlighted in the HTML and click “use in console” or “store in global variable” depending on browser

    it’ll put something like

    temp0 into the console

    just change that line to

    temp0.value = "yourpassword"
    ```  and press enter
    
    it sounds verbose to explain but it's just a couple of clicks and one command, if you're using a password manager it's still a lot easier than typing out a random string and it should work with most text boxes and inputs, might not work if the page is doing something fancy.
    








  • It would be six days at max, assuming they managed to steal the certificate immediately after it was issued, otherwise it’s gonna be even less.

    Having the certificate doesn’t automatically mean you can change the site, if you have control of the site hosting you likely wouldn’t need to steal the cert anyway.

    Stealing the certificate would allow you to run a man in the middle type attack but that’s inevitably going to be very limited in scope. The shorter time limit on the cert reduces that scope even further, which is great.

    Since most Let’s Encrypt certs will have an automated renewal process this doesn’t even really change the overhead of setup so I think this move makes a lot of sense.

    There are other things certificates can be used for as well of course but I’m just going off your example.









  • ADTJtoTechnology@lemmy.worldMicrosoft Teams is dog shit
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    2 个月前

    Yeah same, I remember initially feeling the Outlook integration was extremely clunky, for example, but there’s a big simplicity to being able to grab a recurring meeting link and then just attach it to any meeting regardless of whether it’s rescheduled or has an unusual pattern.

    Teams is much more annoying in this regard since it pretty much requires calendar integration for the meeting to work. Trying to set up any new meeting regenerates the meeting link, and it’s maddening. Like just let these two things not be connected if I want.