So, what's stopping the wrong site from making those requests to your bank and p... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

startling on Oct 24, 2016 | parent | context | favorite | on: We Got Phished

So, what's stopping the wrong site from making those requests to your bank and proxying the image?

Tortoise on Oct 24, 2016 [–]

The bank sets a cookie on your machine and only displays the image if you have the cookie. You won't get the image on a machine you've never used to log in before.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact