Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Device Bound Session Credentials!!!! #320

aamaanaa started this conversation in General
Apr 5, 2024 · 1 comments · 1 reply
Discussion options

https://www.malwarebytes.com/blog/news/2024/04/google-chrome-gets-device-bound-session-credentials-to-stop-cookie-theft

chrome and all chromium browser will most likely get this soon

as i understood it, it means cookies are bound by device with some kind of key, and that key is saved in TMP

the question is, when it is out, would this project be able to still get cookies? as i do not think the key can be fetched from TPM that easy

You must be logged in to vote

Replies: 1 comment · 1 reply

Comment options

Thank you very much for your reminder. I am also continuously paying attention to DBSC. If it is really as mentioned in the document, stealing Cookies will become very difficult. However, we still need to wait for Google to release the official version for more details.

You must be logged in to vote
1 reply
@aamaanaa
Comment options

yes, i would be intrested to see if you simply remove the cookie module and what Google will be doing, or that we some how can hack into it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants
Morty Proxy This is a proxified and sanitized view of the page, visit original site.