Mmastodon TechnologyCybersecurity first seen 8 d ago, last 8 d ago, peak #3
Vercel rolls out Device Bound Session Credentials for logins
Original: Vercel is gradually enabling Device Bound Session Credentials (DBSC) for vercel.com. Supported Chrome on Windows/macOS u
Vercel is gradually enabling Device Bound Session Credentials (DBSC) for vercel.com. On supported Chrome browsers running Windows or macOS, session cookies are tied to a hardware-backed key on the user's device, making it far harder for attackers to replay stolen cookies from another machine. Security commentators note the limits: malware already running locally can still act, and browser support remains narrow.
Why now: Security researchers are discussing a practical deployment of Google's new DBSC anti-cookie-theft technology and its caveats.
Evidence
- Vercel is gradually enabling Device Bound Session Credentials (DBSC) for vercel.com. Supported Chrome on Windows/macOS uses a hardware-backed key to hinder replay of stolen session cookies elsewhere. Malware already running on the device can still act locally, and browser… · cyberseckyle@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/4930413