Spyke

Replies

news

Comment on

Genetics firm 23andMe says user data stolen in credential stuffing attack

https://owasp.org/www-community/attacks/Credential_stuffing

Credential stuffing is the automated injection of stolen username and password pairs (“credentials”) in to website login forms, in order to fraudulently gain access to user accounts.

Since many users will re-use the same password and username/email, when those credentials are exposed (by a database breach or phishing attack, for example) submitting those sets of stolen credentials into dozens or hundreds of other sites can allow an attacker to compromise those accounts too.

memes

Comment on

You better stop slacking

Reply in thread

Yeah, there's nothing wrong with being a construction worker. It's a super important and useful career. But it is hard work and it'll chew you up, then you're left not being able to work at all.