3 ms·
I had always assumed this was impossible because my votes have an auth key attached. Does this mean that the auth key is not used and is just there to trick cas
by citricsquid 15y ago
I had always assumed this was impossible because my votes have an auth key attached. Does this mean that the auth key is not used and is just there to trick casual observers into thinking there is security?
vote?for=3742852&dir=up&by=citricsquid&auth=478876d54494692615d9f2ca184fa9fab2fb9ff7&whence=%69%74%65%6d%3f%69%64%3d%33%37%34%32%37%34%32
- kwamenum86 15y agoI'm guessing this security hole is a regression because I could have sworn I tried this before. But I don't remember for certain.
- jpulgarin 15y agoThat parameter is absent when you're not logged in.
- wglb 15y agoThis is for the comment votes; it looks like the vote for articles doesn't have a token.