Quote from: TheQuin on January 12, 2021, 12:25:37 AM

Quote from: ESG on January 11, 2021, 12:54:34 PM

Did you mean that it is possible for them to access our account managing to steal cookies from our devices .
.. ~ ..

Yes. If they can steal your cookies they can hijack your logged-in session which is already authorised by 2fa.

###
.. so i think i've been doing it wrong for a long time, because i leave a good amount of satoshis, in an open account, on my mother's phone, for her to click and collect reward points and satoshis .. it means that i come risking a long time ago ... because she sees videos and images from WAP .. that can come with malicious hidden files ..and can read and get access and toast the balance there, ....
> I think that in that case, if I delete the cookies, the account will log out, then the right thing would be for me to leave the minimum that the site requires to click without captcha and be able to enable the bonuses and withdraw the rest for another account that is left out, just to earn income.

Quote from: Lucasgabd on January 12, 2021, 08:01:44 PM

.......~~~~... and never mark the "trust this device" box some websites (like kucoin) have.

better safe than sorry.

..no, I never check these boxes so I don't need to use the password anymore, many do, for convenience, but they run the risk .. and I think the most difficult thing is keeping notes secure for a long time, as there can be several bad weather as water invades and spoils the notes ..., a fire consumes everything, and or even the government enters and finds the notes .. not only the government but also other thieves ... without talking about rats and moths ... then the more important besides security with the account, is security with the notes ..
Thanks for the clarification!