5 ms·

I wouldn't call it social engineering, because the reporter didn't intend to get the cookies while filing the first report. It's like the Github scanner that r

I wouldn't call it social engineering, because the reporter didn't intend to get the cookies while filing the first report. It's like the Github scanner that reports leaked tokens.

asciii 3y ago
What's crazy is that the reporter previously filed a bug report about hijacking sessions and then it comes full circle during a different report. That's karma