2026-10-27 19:02 UTC
Replies (2)
-
@Catoblepas@lemmy.blahaj.zone 2026-10-27 19:08
Doors that make it’s dangerous to log in persistently anywhere, period, in case you click on a shady link? I legitimately don’t know much and trust common sense prevention (run sites through virus total if I’m not familiar with them) and built in protection to do most of it, and I haven’t had any known password thefts from anything other than servers getting hacked. I do have an authenticator app and use it on really important stuff (government, school) but that’s about it.
-
@balsoft@lemmy.ml 2026-10-27 19:11
Nah cookies are specifically separated out per-domain. There are some awful companies which do set cross-website cookies (e.g. facebook, google, and other adware), but (1) they do not leak your credentials and are used mostly for fingerprinting and ad targeting, (2) should be filtered out by your browser’s tracking protection (hence “if your browser is set up correctly”). Realistically there would still be a way for the website to fingerprint you enough to know who you are, so the most adversarial outcome from clicking a link is that the attacker can know that you clicked that link, along with your general location (from geoIP) and some device info. iirc that’s how the linux tech tips channel got into trouble. Nah, that was pretty much an .exe sent out by a fake sponsor, which then stole browser data (including login cookies). Opening a link ≠ running an unsandboxed exe.