Hacker News new | ask | show | jobs
by Operyl 2914 days ago
I quickly skimmed, but this entire attack is assuming that the attacker has successfully MITMed the API. At that point everything is already nuked, so of course you can fabricate any number of attacks. Did I miss something important?