2 ms·
did I say cookie tossing is something new? If I would consider it as a new attack I would call it Homakov Cookie Tossing Attack. Now it's just cookie tossing.
by homakov 14y ago
did I say cookie tossing is something new?
If I would consider it as a new attack I would call it Homakov Cookie Tossing Attack. Now it's just cookie tossing.
- gingerlime 14y agoSaying that it's not new wasn't meant as a criticism for your discovery of this happening on github. Quite the opposite. It's more of an observation on how even well-known security vulnerabilities can go overlooked. Even by companies with as big exposure and as many resources as github.