Day 34 10 min
Heroku 2022: stolen GitHub OAuth tokens
1 / 13 · ≈ 8 min left
Warm-up
From yesterday. Answer from memory: a wrong guess still helps you remember.
The engineer’s SSO login required 2FA. Why did 2FA not stop the attacker?
Heroku 2022: stolen GitHub OAuth tokens
1 / 13 · ≈ 8 min left
From yesterday. Answer from memory: a wrong guess still helps you remember.
The engineer’s SSO login required 2FA. Why did 2FA not stop the attacker?