tech π‘οΈ Chrome's new defense against account takeovers
Chrome is rolling out DBSCs, a new protection against session cookie theft. This feature works on Chrome version 147 for Windows and 150 for macOS. Attackers can steal the cookie, but they cannot sign the challenge with the private key kept safe in the TPM or secure enclave. This method moves away from easily stolen shared secrets, much like Passkeys. Google is currently testing this feature before making it generally available.