4 ms·
i think if you get a valid login cookie, and use it, it will tell you what account you have in the top right.
by xenophanes 17y ago
i think if you get a valid login cookie, and use it, it will tell you what account you have in the top right.
- mariorz 17y agoWell obviously, but you couldn't do a brute force attack like this to a specific account.
- e1ven 17y agoI believe the implication is that you'd have a sessionid. Effectively, the username and password rolled into one unique number, stored in the cookie.
- dfranke 17y agoI think by 'specific account' he means 'chosen account', in which case he'd be correct without more targeted social engineering.