On: Browser in the Browser (BITB) Attack

[wanderingmind]

I use bitwarden, but on rare occasions when i need type passwd, I always type the wrong password first time just to be safe. I have always had this fear of spoofing which now looks very real.

[LadyCailin → wanderingmind]

Pretty easy to just proxy the password through to the real service, and see if it fails or not before adding it to your pwn DB.

[Thorrez → wanderingmind]

If you're worried about this attack in particular, then drag the window above the line of death.

https://textslashplain.com/2017/01/14/the-line-of-death/

Now, if you got put into fullscreen mode without realizing it, that's another problem.