GET https://kbin.spritesserver.nl/u/@dayvid@lemmy.world

Response
200 OK
IP
64.124.8.204
Profiled on
Token
8cc00b

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 0.15 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.03 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
Proxies\__CG__\App\Entity\Entry {#1578
  +user: Proxies\__CG__\App\Entity\User {#1719 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
  +image: Proxies\__CG__\App\Entity\Image {#1616 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#2469 …}
  +slug: "Recursive-authentication"
  +title: "Recursive authentication"
  +url: "https://lemmy.world/pictrs/image/8533c288-b38d-4a96-885c-748bda4ddf7e.png"
  +body: null
  +type: "image"
  +lang: "en"
  +isOc: false
  +hasEmbed: true
  +commentCount: 97
  +favouriteCount: 754
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1726308561 {#1737
    date: 2024-09-14 12:09:21.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2467 …}
  +votes: Doctrine\ORM\PersistentCollection {#1564 …}
  +reports: Doctrine\ORM\PersistentCollection {#1613 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2379 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2382 …}
  +badges: Doctrine\ORM\PersistentCollection {#1883 …}
  +children: [
    App\Entity\EntryComment {#1595
      +user: App\Entity\User {#261 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1578 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1652 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1654 …}
      +body: """
        TOTP codes can be phished. Technically FIDO2 keys like Yubikeys are one of the only phishing-resistant authenticators out there now, because they’re tied to the official domain of the real site and won’t authenticate to a fake.\n
        \n
        Passkeys are similarly phishing resistant, and Microsoft Authenticator will basically have passkey support added early this year. For now it’s actually not phishing resistant! Though it’s somewhat better than TOTP.\n
        \n
        The issue is that phishing resistance is important but it doesn’t stop session stealing (someone getting ahold of the cookie on your computer that confirms you’re signed in and have done MFA). But it does make it harder to steal sessions because phishing resistance means attackers need to get it from your computer instead of intercepting a fake login.\n
        \n
        Just a little technical backstory around why admins are needing to lock down auth methods in more ways as attacks become more sneaky and the more sophisticated attacks become automated and easier and thus more frequent.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 3
      +score: 0
      +lastActive: DateTime @1704591125 {#1430
        date: 2024-01-07 02:32:05.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@qaz@lemmy.world"
        "@ComradePedro@lemmy.ml"
        "@theo@lemmy.world"
        "@LemmyIsFantastic@lemmy.world"
        "@ParetoOptimalDev@lemmy.today"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1679 …}
      +nested: Doctrine\ORM\PersistentCollection {#1668 …}
      +votes: Doctrine\ORM\PersistentCollection {#1666 …}
      +reports: Doctrine\ORM\PersistentCollection {#1669 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1549 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1573 …}
      -id: 287388
      -bodyTs: "'actual':63 'ad':55 'admin':142 'ahold':91 'around':140 'attack':121,154,162 'auth':148 'authent':19,38,49 'autom':164 'backstori':139 'basic':51 'becom':155,163 'better':71 'code':2 'comput':97,128 'confirm':99 'cooki':94 'doesn':84 'domain':30 'done':106 'earli':56 'easier':166 'fake':41,133 'fido2':7 'frequent':170 'get':90,124 'harder':113 'import':81 'instead':129 'intercept':131 'issu':75 'key':8 'like':9 'littl':137 'lock':146 'login':134 'make':111 'mean':120 'method':149 'mfa':107 'microsoft':48 'need':122,144 'offici':29 'one':12 'passkey':42,53 'phish':5,17,45,65,78,118 'phishing-resist':16 're':25,101 'real':33 'resist':18,46,66,79,119 'session':87,116 'sign':102 'similar':44 'site':34 'sneaki':157 'someon':89 'somewhat':70 'sophist':161 'steal':88,115 'stop':86 'support':54 'technic':6,138 'though':67 'thus':168 'tie':26 'totp':1,73 'way':152 'won':36 'year':58 'yubikey':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6468345"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704591125 {#1429
        date: 2024-01-07 02:32:05.0 +01:00
      }
      +"title": 287388
    }
  ]
  -id: 27329
  -titleTs: "'authent':2 'recurs':1"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704523399
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10338888"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704436999 {#1709
    date: 2024-01-05 07:43:19.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
Proxies\__CG__\App\Entity\Entry {#1578
  +user: Proxies\__CG__\App\Entity\User {#1719 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
  +image: Proxies\__CG__\App\Entity\Image {#1616 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#2469 …}
  +slug: "Recursive-authentication"
  +title: "Recursive authentication"
  +url: "https://lemmy.world/pictrs/image/8533c288-b38d-4a96-885c-748bda4ddf7e.png"
  +body: null
  +type: "image"
  +lang: "en"
  +isOc: false
  +hasEmbed: true
  +commentCount: 97
  +favouriteCount: 754
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1726308561 {#1737
    date: 2024-09-14 12:09:21.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2467 …}
  +votes: Doctrine\ORM\PersistentCollection {#1564 …}
  +reports: Doctrine\ORM\PersistentCollection {#1613 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2379 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2382 …}
  +badges: Doctrine\ORM\PersistentCollection {#1883 …}
  +children: [
    App\Entity\EntryComment {#1595
      +user: App\Entity\User {#261 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1578 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1652 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1654 …}
      +body: """
        TOTP codes can be phished. Technically FIDO2 keys like Yubikeys are one of the only phishing-resistant authenticators out there now, because they’re tied to the official domain of the real site and won’t authenticate to a fake.\n
        \n
        Passkeys are similarly phishing resistant, and Microsoft Authenticator will basically have passkey support added early this year. For now it’s actually not phishing resistant! Though it’s somewhat better than TOTP.\n
        \n
        The issue is that phishing resistance is important but it doesn’t stop session stealing (someone getting ahold of the cookie on your computer that confirms you’re signed in and have done MFA). But it does make it harder to steal sessions because phishing resistance means attackers need to get it from your computer instead of intercepting a fake login.\n
        \n
        Just a little technical backstory around why admins are needing to lock down auth methods in more ways as attacks become more sneaky and the more sophisticated attacks become automated and easier and thus more frequent.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 3
      +score: 0
      +lastActive: DateTime @1704591125 {#1430
        date: 2024-01-07 02:32:05.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@qaz@lemmy.world"
        "@ComradePedro@lemmy.ml"
        "@theo@lemmy.world"
        "@LemmyIsFantastic@lemmy.world"
        "@ParetoOptimalDev@lemmy.today"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1679 …}
      +nested: Doctrine\ORM\PersistentCollection {#1668 …}
      +votes: Doctrine\ORM\PersistentCollection {#1666 …}
      +reports: Doctrine\ORM\PersistentCollection {#1669 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1549 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1573 …}
      -id: 287388
      -bodyTs: "'actual':63 'ad':55 'admin':142 'ahold':91 'around':140 'attack':121,154,162 'auth':148 'authent':19,38,49 'autom':164 'backstori':139 'basic':51 'becom':155,163 'better':71 'code':2 'comput':97,128 'confirm':99 'cooki':94 'doesn':84 'domain':30 'done':106 'earli':56 'easier':166 'fake':41,133 'fido2':7 'frequent':170 'get':90,124 'harder':113 'import':81 'instead':129 'intercept':131 'issu':75 'key':8 'like':9 'littl':137 'lock':146 'login':134 'make':111 'mean':120 'method':149 'mfa':107 'microsoft':48 'need':122,144 'offici':29 'one':12 'passkey':42,53 'phish':5,17,45,65,78,118 'phishing-resist':16 're':25,101 'real':33 'resist':18,46,66,79,119 'session':87,116 'sign':102 'similar':44 'site':34 'sneaki':157 'someon':89 'somewhat':70 'sophist':161 'steal':88,115 'stop':86 'support':54 'technic':6,138 'though':67 'thus':168 'tie':26 'totp':1,73 'way':152 'won':36 'year':58 'yubikey':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6468345"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704591125 {#1429
        date: 2024-01-07 02:32:05.0 +01:00
      }
      +"title": 287388
    }
  ]
  -id: 27329
  -titleTs: "'authent':2 'recurs':1"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704523399
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10338888"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704436999 {#1709
    date: 2024-01-05 07:43:19.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
Proxies\__CG__\App\Entity\Entry {#1578
  +user: Proxies\__CG__\App\Entity\User {#1719 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
  +image: Proxies\__CG__\App\Entity\Image {#1616 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#2469 …}
  +slug: "Recursive-authentication"
  +title: "Recursive authentication"
  +url: "https://lemmy.world/pictrs/image/8533c288-b38d-4a96-885c-748bda4ddf7e.png"
  +body: null
  +type: "image"
  +lang: "en"
  +isOc: false
  +hasEmbed: true
  +commentCount: 97
  +favouriteCount: 754
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1726308561 {#1737
    date: 2024-09-14 12:09:21.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2467 …}
  +votes: Doctrine\ORM\PersistentCollection {#1564 …}
  +reports: Doctrine\ORM\PersistentCollection {#1613 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2379 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2382 …}
  +badges: Doctrine\ORM\PersistentCollection {#1883 …}
  +children: [
    App\Entity\EntryComment {#1595
      +user: App\Entity\User {#261 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1578 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1652 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1654 …}
      +body: """
        TOTP codes can be phished. Technically FIDO2 keys like Yubikeys are one of the only phishing-resistant authenticators out there now, because they’re tied to the official domain of the real site and won’t authenticate to a fake.\n
        \n
        Passkeys are similarly phishing resistant, and Microsoft Authenticator will basically have passkey support added early this year. For now it’s actually not phishing resistant! Though it’s somewhat better than TOTP.\n
        \n
        The issue is that phishing resistance is important but it doesn’t stop session stealing (someone getting ahold of the cookie on your computer that confirms you’re signed in and have done MFA). But it does make it harder to steal sessions because phishing resistance means attackers need to get it from your computer instead of intercepting a fake login.\n
        \n
        Just a little technical backstory around why admins are needing to lock down auth methods in more ways as attacks become more sneaky and the more sophisticated attacks become automated and easier and thus more frequent.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 3
      +score: 0
      +lastActive: DateTime @1704591125 {#1430
        date: 2024-01-07 02:32:05.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@qaz@lemmy.world"
        "@ComradePedro@lemmy.ml"
        "@theo@lemmy.world"
        "@LemmyIsFantastic@lemmy.world"
        "@ParetoOptimalDev@lemmy.today"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1679 …}
      +nested: Doctrine\ORM\PersistentCollection {#1668 …}
      +votes: Doctrine\ORM\PersistentCollection {#1666 …}
      +reports: Doctrine\ORM\PersistentCollection {#1669 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1549 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1573 …}
      -id: 287388
      -bodyTs: "'actual':63 'ad':55 'admin':142 'ahold':91 'around':140 'attack':121,154,162 'auth':148 'authent':19,38,49 'autom':164 'backstori':139 'basic':51 'becom':155,163 'better':71 'code':2 'comput':97,128 'confirm':99 'cooki':94 'doesn':84 'domain':30 'done':106 'earli':56 'easier':166 'fake':41,133 'fido2':7 'frequent':170 'get':90,124 'harder':113 'import':81 'instead':129 'intercept':131 'issu':75 'key':8 'like':9 'littl':137 'lock':146 'login':134 'make':111 'mean':120 'method':149 'mfa':107 'microsoft':48 'need':122,144 'offici':29 'one':12 'passkey':42,53 'phish':5,17,45,65,78,118 'phishing-resist':16 're':25,101 'real':33 'resist':18,46,66,79,119 'session':87,116 'sign':102 'similar':44 'site':34 'sneaki':157 'someon':89 'somewhat':70 'sophist':161 'steal':88,115 'stop':86 'support':54 'technic':6,138 'though':67 'thus':168 'tie':26 'totp':1,73 'way':152 'won':36 'year':58 'yubikey':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6468345"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704591125 {#1429
        date: 2024-01-07 02:32:05.0 +01:00
      }
      +"title": 287388
    }
  ]
  -id: 27329
  -titleTs: "'authent':2 'recurs':1"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704523399
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10338888"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704436999 {#1709
    date: 2024-01-05 07:43:19.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#1595
  +user: App\Entity\User {#261 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1578
    +user: Proxies\__CG__\App\Entity\User {#1719 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
    +image: Proxies\__CG__\App\Entity\Image {#1616 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#2469 …}
    +slug: "Recursive-authentication"
    +title: "Recursive authentication"
    +url: "https://lemmy.world/pictrs/image/8533c288-b38d-4a96-885c-748bda4ddf7e.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 97
    +favouriteCount: 754
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1726308561 {#1737
      date: 2024-09-14 12:09:21.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2467 …}
    +votes: Doctrine\ORM\PersistentCollection {#1564 …}
    +reports: Doctrine\ORM\PersistentCollection {#1613 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2379 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2382 …}
    +badges: Doctrine\ORM\PersistentCollection {#1883 …}
    +children: [
      App\Entity\EntryComment {#1595}
    ]
    -id: 27329
    -titleTs: "'authent':2 'recurs':1"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704523399
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10338888"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704436999 {#1709
      date: 2024-01-05 07:43:19.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1652 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1654 …}
  +body: """
    TOTP codes can be phished. Technically FIDO2 keys like Yubikeys are one of the only phishing-resistant authenticators out there now, because they’re tied to the official domain of the real site and won’t authenticate to a fake.\n
    \n
    Passkeys are similarly phishing resistant, and Microsoft Authenticator will basically have passkey support added early this year. For now it’s actually not phishing resistant! Though it’s somewhat better than TOTP.\n
    \n
    The issue is that phishing resistance is important but it doesn’t stop session stealing (someone getting ahold of the cookie on your computer that confirms you’re signed in and have done MFA). But it does make it harder to steal sessions because phishing resistance means attackers need to get it from your computer instead of intercepting a fake login.\n
    \n
    Just a little technical backstory around why admins are needing to lock down auth methods in more ways as attacks become more sneaky and the more sophisticated attacks become automated and easier and thus more frequent.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704591125 {#1430
    date: 2024-01-07 02:32:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@qaz@lemmy.world"
    "@ComradePedro@lemmy.ml"
    "@theo@lemmy.world"
    "@LemmyIsFantastic@lemmy.world"
    "@ParetoOptimalDev@lemmy.today"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1679 …}
  +nested: Doctrine\ORM\PersistentCollection {#1668 …}
  +votes: Doctrine\ORM\PersistentCollection {#1666 …}
  +reports: Doctrine\ORM\PersistentCollection {#1669 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1549 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1573 …}
  -id: 287388
  -bodyTs: "'actual':63 'ad':55 'admin':142 'ahold':91 'around':140 'attack':121,154,162 'auth':148 'authent':19,38,49 'autom':164 'backstori':139 'basic':51 'becom':155,163 'better':71 'code':2 'comput':97,128 'confirm':99 'cooki':94 'doesn':84 'domain':30 'done':106 'earli':56 'easier':166 'fake':41,133 'fido2':7 'frequent':170 'get':90,124 'harder':113 'import':81 'instead':129 'intercept':131 'issu':75 'key':8 'like':9 'littl':137 'lock':146 'login':134 'make':111 'mean':120 'method':149 'mfa':107 'microsoft':48 'need':122,144 'offici':29 'one':12 'passkey':42,53 'phish':5,17,45,65,78,118 'phishing-resist':16 're':25,101 'real':33 'resist':18,46,66,79,119 'session':87,116 'sign':102 'similar':44 'site':34 'sneaki':157 'someon':89 'somewhat':70 'sophist':161 'steal':88,115 'stop':86 'support':54 'technic':6,138 'though':67 'thus':168 'tie':26 'totp':1,73 'way':152 'won':36 'year':58 'yubikey':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6468345"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704591125 {#1429
    date: 2024-01-07 02:32:05.0 +01:00
  }
  +"title": 287388
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#1595
  +user: App\Entity\User {#261 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1578
    +user: Proxies\__CG__\App\Entity\User {#1719 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
    +image: Proxies\__CG__\App\Entity\Image {#1616 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#2469 …}
    +slug: "Recursive-authentication"
    +title: "Recursive authentication"
    +url: "https://lemmy.world/pictrs/image/8533c288-b38d-4a96-885c-748bda4ddf7e.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 97
    +favouriteCount: 754
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1726308561 {#1737
      date: 2024-09-14 12:09:21.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2467 …}
    +votes: Doctrine\ORM\PersistentCollection {#1564 …}
    +reports: Doctrine\ORM\PersistentCollection {#1613 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2379 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2382 …}
    +badges: Doctrine\ORM\PersistentCollection {#1883 …}
    +children: [
      App\Entity\EntryComment {#1595}
    ]
    -id: 27329
    -titleTs: "'authent':2 'recurs':1"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704523399
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10338888"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704436999 {#1709
      date: 2024-01-05 07:43:19.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1652 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1654 …}
  +body: """
    TOTP codes can be phished. Technically FIDO2 keys like Yubikeys are one of the only phishing-resistant authenticators out there now, because they’re tied to the official domain of the real site and won’t authenticate to a fake.\n
    \n
    Passkeys are similarly phishing resistant, and Microsoft Authenticator will basically have passkey support added early this year. For now it’s actually not phishing resistant! Though it’s somewhat better than TOTP.\n
    \n
    The issue is that phishing resistance is important but it doesn’t stop session stealing (someone getting ahold of the cookie on your computer that confirms you’re signed in and have done MFA). But it does make it harder to steal sessions because phishing resistance means attackers need to get it from your computer instead of intercepting a fake login.\n
    \n
    Just a little technical backstory around why admins are needing to lock down auth methods in more ways as attacks become more sneaky and the more sophisticated attacks become automated and easier and thus more frequent.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704591125 {#1430
    date: 2024-01-07 02:32:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@qaz@lemmy.world"
    "@ComradePedro@lemmy.ml"
    "@theo@lemmy.world"
    "@LemmyIsFantastic@lemmy.world"
    "@ParetoOptimalDev@lemmy.today"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1679 …}
  +nested: Doctrine\ORM\PersistentCollection {#1668 …}
  +votes: Doctrine\ORM\PersistentCollection {#1666 …}
  +reports: Doctrine\ORM\PersistentCollection {#1669 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1549 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1573 …}
  -id: 287388
  -bodyTs: "'actual':63 'ad':55 'admin':142 'ahold':91 'around':140 'attack':121,154,162 'auth':148 'authent':19,38,49 'autom':164 'backstori':139 'basic':51 'becom':155,163 'better':71 'code':2 'comput':97,128 'confirm':99 'cooki':94 'doesn':84 'domain':30 'done':106 'earli':56 'easier':166 'fake':41,133 'fido2':7 'frequent':170 'get':90,124 'harder':113 'import':81 'instead':129 'intercept':131 'issu':75 'key':8 'like':9 'littl':137 'lock':146 'login':134 'make':111 'mean':120 'method':149 'mfa':107 'microsoft':48 'need':122,144 'offici':29 'one':12 'passkey':42,53 'phish':5,17,45,65,78,118 'phishing-resist':16 're':25,101 'real':33 'resist':18,46,66,79,119 'session':87,116 'sign':102 'similar':44 'site':34 'sneaki':157 'someon':89 'somewhat':70 'sophist':161 'steal':88,115 'stop':86 'support':54 'technic':6,138 'though':67 'thus':168 'tie':26 'totp':1,73 'way':152 'won':36 'year':58 'yubikey':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6468345"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704591125 {#1429
    date: 2024-01-07 02:32:05.0 +01:00
  }
  +"title": 287388
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#1595
  +user: App\Entity\User {#261 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1578
    +user: Proxies\__CG__\App\Entity\User {#1719 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
    +image: Proxies\__CG__\App\Entity\Image {#1616 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#2469 …}
    +slug: "Recursive-authentication"
    +title: "Recursive authentication"
    +url: "https://lemmy.world/pictrs/image/8533c288-b38d-4a96-885c-748bda4ddf7e.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 97
    +favouriteCount: 754
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1726308561 {#1737
      date: 2024-09-14 12:09:21.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2467 …}
    +votes: Doctrine\ORM\PersistentCollection {#1564 …}
    +reports: Doctrine\ORM\PersistentCollection {#1613 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2379 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2382 …}
    +badges: Doctrine\ORM\PersistentCollection {#1883 …}
    +children: [
      App\Entity\EntryComment {#1595}
    ]
    -id: 27329
    -titleTs: "'authent':2 'recurs':1"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704523399
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10338888"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704436999 {#1709
      date: 2024-01-05 07:43:19.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1575 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1652 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1654 …}
  +body: """
    TOTP codes can be phished. Technically FIDO2 keys like Yubikeys are one of the only phishing-resistant authenticators out there now, because they’re tied to the official domain of the real site and won’t authenticate to a fake.\n
    \n
    Passkeys are similarly phishing resistant, and Microsoft Authenticator will basically have passkey support added early this year. For now it’s actually not phishing resistant! Though it’s somewhat better than TOTP.\n
    \n
    The issue is that phishing resistance is important but it doesn’t stop session stealing (someone getting ahold of the cookie on your computer that confirms you’re signed in and have done MFA). But it does make it harder to steal sessions because phishing resistance means attackers need to get it from your computer instead of intercepting a fake login.\n
    \n
    Just a little technical backstory around why admins are needing to lock down auth methods in more ways as attacks become more sneaky and the more sophisticated attacks become automated and easier and thus more frequent.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704591125 {#1430
    date: 2024-01-07 02:32:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@qaz@lemmy.world"
    "@ComradePedro@lemmy.ml"
    "@theo@lemmy.world"
    "@LemmyIsFantastic@lemmy.world"
    "@ParetoOptimalDev@lemmy.today"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1679 …}
  +nested: Doctrine\ORM\PersistentCollection {#1668 …}
  +votes: Doctrine\ORM\PersistentCollection {#1666 …}
  +reports: Doctrine\ORM\PersistentCollection {#1669 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1549 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1573 …}
  -id: 287388
  -bodyTs: "'actual':63 'ad':55 'admin':142 'ahold':91 'around':140 'attack':121,154,162 'auth':148 'authent':19,38,49 'autom':164 'backstori':139 'basic':51 'becom':155,163 'better':71 'code':2 'comput':97,128 'confirm':99 'cooki':94 'doesn':84 'domain':30 'done':106 'earli':56 'easier':166 'fake':41,133 'fido2':7 'frequent':170 'get':90,124 'harder':113 'import':81 'instead':129 'intercept':131 'issu':75 'key':8 'like':9 'littl':137 'lock':146 'login':134 'make':111 'mean':120 'method':149 'mfa':107 'microsoft':48 'need':122,144 'offici':29 'one':12 'passkey':42,53 'phish':5,17,45,65,78,118 'phishing-resist':16 're':25,101 'real':33 'resist':18,46,66,79,119 'session':87,116 'sign':102 'similar':44 'site':34 'sneaki':157 'someon':89 'somewhat':70 'sophist':161 'steal':88,115 'stop':86 'support':54 'technic':6,138 'though':67 'thus':168 'tie':26 'totp':1,73 'way':152 'won':36 'year':58 'yubikey':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6468345"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704591125 {#1429
    date: 2024-01-07 02:32:05.0 +01:00
  }
  +"title": 287388
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_ADMIN 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED ROLE_MODERATOR 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details