Dropbox admits 130 of its private GitHub repos were copied after phishing attack
by sgarman on 11/3/2022, 12:32:38 AM
Does anyone have any idea how the hardware key part worked? I was under the impression my yubikey would only send a key for a specific URL so there would be no way to just forward the key to actual github because it would be for the wrong domain.
by cwinq on 11/2/2022, 10:19:36 PM
some details on this breach: https://blog.gitguardian.com/dropbox-breach-hack-github-circ...
by dieselhead on 11/2/2022, 3:55:48 AM
Should we expect a source code dump soon?
Does anyone have any idea how the hardware key part worked? I was under the impression my yubikey would only send a key for a specific URL so there would be no way to just forward the key to actual github because it would be for the wrong domain.