Row 27160

Row ID: 27160 | Dataset Entry | Axioma AXP Content Repository

Content Data

This page contains data entry 27160 from the Axioma AXP content repository. The structured data below represents the complete record for this entry.

MITM using a reverse proxy that shows you the actual site. AFAIK, security keys (YubiKey and others) are currently the only technical defense against this technique, because they use a separate channel to authenticate. Since the attackers have no way to force the security key's traffic to go through their proxy, the source the login attempt is coming from and the security key's source won't match, so authentication will fail.

This is obviously a simplified explanation.

FieldValue
text MITM using a reverse proxy that shows you the actual site. AFAIK, security keys (YubiKey and others) are currently the only technical defense against this technique, because they use a separate channel to authenticate. Since the attackers have no way to force the security key's traffic to go through their proxy, the source the login attempt is coming from and the security key's source won't match, so authentication will fail. This is obviously a simplified explanation.
label r/technology
dataType comment
communityName r/technology
datetime 2024-05-21
username_encoded Z0FBQUFBQm5Lak1ENEY4MlU4YlZSaTc5Vk5tZW90ak1qRHphbnRJZVhiWHUtNXFoQWlKVlNzRFZhNUp1bjF4eTMxWm11UTV0c2N5NTFvYWxnV0I4am93dzM4U09INlluVFE9PQ==
url_encoded Z0FBQUFBQm5Lak9UY0RXVk1ON2JjMTBBczFOUTJvTW1qWU5tdVR1Y2UxOFAwS3FWWi1pNWJCd3Q4ZU1ERXhPOEYtRE5PbkhwOWhPLUM5Zy1VdjRsQjRtT3pNRzlBdVdrdFpHR1JYbHZSSHhVa1NoYTFkdE9icmtxNDc5b1JobkZURmRCZm1PaUJHU2x3WVl2UE5JZzBFcC1qeXBPUFNfZEpTRDhqZWFhbUgyT3AwZHVOZzJFXzhjak1leldTVmpZekpORGo1SFZ4OEQ2Ynk3a212ZlhyeHc3UlJNeVBuLTVFQT09

Raw Record

{
  "text": "MITM using a reverse proxy that shows you the actual site.  AFAIK, security keys (YubiKey and others) are currently the only technical defense against this technique, because they use a separate channel to authenticate.  Since the attackers have no way to force the security key's traffic to go through their proxy, the source the login attempt is coming from and the security key's source won't match, so authentication will fail.  \n\nThis is obviously a simplified explanation.",
  "label": "r/technology",
  "dataType": "comment",
  "communityName": "r/technology",
  "datetime": "2024-05-21",
  "username_encoded": "Z0FBQUFBQm5Lak1ENEY4MlU4YlZSaTc5Vk5tZW90ak1qRHphbnRJZVhiWHUtNXFoQWlKVlNzRFZhNUp1bjF4eTMxWm11UTV0c2N5NTFvYWxnV0I4am93dzM4U09INlluVFE9PQ==",
  "url_encoded": "Z0FBQUFBQm5Lak9UY0RXVk1ON2JjMTBBczFOUTJvTW1qWU5tdVR1Y2UxOFAwS3FWWi1pNWJCd3Q4ZU1ERXhPOEYtRE5PbkhwOWhPLUM5Zy1VdjRsQjRtT3pNRzlBdVdrdFpHR1JYbHZSSHhVa1NoYTFkdE9icmtxNDc5b1JobkZURmRCZm1PaUJHU2x3WVl2UE5JZzBFcC1qeXBPUFNfZEpTRDhqZWFhbUgyT3AwZHVOZzJFXzhjak1leldTVmpZekpORGo1SFZ4OEQ2Ynk3a212ZlhyeHc3UlJNeVBuLTVFQT09"
}

Entry Information