@stman OFC #Browsers are the prime attack vector since we as users allowed Turing-complete #RemoteCodeExecution inside of it aka. #JavaScript.

• "#CookieStealer" are obviously impervious to #MFA as they literally copy valid #SessionCookies.

This is the way #Skiddies on #discord "hack" each other for over a decade now...