3 ms·
I didn't realize PoisonTap's creator, Samy, is also the creator of the Evercookie[0], a persistent identifying cookie that remains sharded(then recombines) in y
by FilterSweep 10y ago
I didn't realize PoisonTap's creator, Samy, is also the creator of the Evercookie[0], a persistent identifying cookie that remains sharded(then recombines) in your system even after clearing your cookies. While a very cool project, it has some scary implications on users not trained in their removal.
[0] https://github.com/samyk/evercookie https://github.com/samyk/evercookie
- devy 10y agoHe's a prolific security researcher. Evercookie got him the fame and since then he's been researching all sorts of security vulnerabilities even on things like combination locks [1], I enjoy his video tutorials a lot. [1] http://samy.pl/combobreaker/ http://samy.pl/combobreaker/
- rudolf0 10y agoI'd argue the Myspace worm [1] was what really got him the fame. [1] https://en.wikipedia.org/wiki/Samy_(computer_worm) https://en.wikipedia.org/wiki/Samy_(computer_worm)
- FilterSweep 10y agoThanks, I had no idea he was also behind that one! That's quite a severe sentencing for a "Guestbook Signing" XSS exploit. I wonder if the sentence was reduced.
- rudolf0 10y agoYeah, not sure why he was punished so harshly for something that probably didn't inconvenience users too much and was clearly intended as a prank. I do see that Myspace might've spent $20,000 or more to remediate th situation but it seems harsh to make him pay all that.