Free Post DBSC Introducing dbsc.dev: Does Your Browser Support DBSC? Every other web platform feature I've ever written about, I've been able to test in some easy way. Open DevTools, type the name of the thing,...
Free Post DBSC Device Bound Session Credentials lands in Chrome on macOS Device Bound Session Credentials (DBSC) is Chrome's answer to session cookie theft, usually by InfoStealer malware. Instead of a cookie being a bearer token that works anywhere it&...
Free Post DBSC Everything I Learned Shipping Device Bound Session Credentials We shipped Device Bound Session Credentials at Report URI, open-sourced the server-side implementation, and then discovered a long list of things the specification doesn't prepare you...
Free Post Report URI Open-Sourcing dbsc-php: a Server Library for Device Bound Session Credentials in PHP We’ve open-sourced dbsc-php, a small PHP library that makes it easier to deploy Device Bound Session Credentials and turn stolen session cookies into something far less useful....
Free Post Report URI DBSC Beta at Report URI This week, I published a blog post about Device Bound Session Credentials, a new technology that will significantly hamper the efforts of Infostealers and reduce the damage caused by stolen...
Free Post Report URI Device Bound Session Credentials: Making Stolen Cookies Useless A stolen session cookie can be vastly more powerful than a stolen password. The attacker doesn’t need to phish the user, bypass MFA, or defeat their passkey; they simply...
Follow