That video, while cool, is tremendously misleading. Not only does he make a lot of unlikely assumptions assumptions (it should not be that easy to get someone'

That video, while cool, is tremendously misleading. Not only does he make a lot of unlikely assumptions assumptions (it should not be that easy to get someone's apache pid), but Facebook doesn't use php's build-in session management code at all.