I was on some website the other day and I opened the browser console for unrelated reasons. They had a giant message there that was like "STOP. If someone asked you to paste something here, you are probably going to be hacked. Do not do anything here unless you know what you're doing."

Which, admittedly, is probably good advice.

[–] dovahking@lemmy.world 5 points 1 day ago

Good thing the site is asking me for pressing ctrl and v instead of pasting.

[–] abbadon420@sh.itjust.works 11 points 2 days ago

I've seen that before. I think it s default for some js package

[–] jol@discuss.tchncs.de 3 points 2 days ago

I think Facebook started doing that 15 years go. Lots of people were being scammed like that.

[–] MonkderVierte@lemmy.zip 3 points 2 days ago* (last edited 2 days ago)

I've opened console on some random site with far too wide article text and those asshats froze my whole browser.

[–] 712@discuss.tchncs.de 1 points 2 days ago (2 children)

I don’t get it, how does that hack/scam work?

[–] SteveTech@aussie.zone 24 points 2 days ago* (last edited 2 days ago)

Someone would say something like 'you can unlock a secret page on Facebook, just press F12 and paste this in', and the snippet would upload the victim's session token to the scammer's server. So that they can use the account to promote a crypto scam or whatever.

[–] Candice_the_elephant@lemmy.world 4 points 2 days ago

If you paste code into the consol the code writer can do anything you can do on any website in the context of the current website you are on. So for example download files, capture any data, or take over and use your active session remotely.