3 ms·
The problem is not applications you code, it's ones that you use. Do you stop using a webapp once you see a session token in the URL?
by timf 17y ago
The problem is not applications you code, it's ones that you use. Do you stop using a webapp once you see a session token in the URL?
- simonw 17y agoGood point - I was thinking about this entirely from the POV of an application developer.
- tptacek 17y agoDo you notice all the other crazy bad things that the applications you use do? This is not a particularly virulent attack.
- timf 17y agoSure. And I noticed the tokens in URLs but did not usually care that much since they are over https which doesn't reveal the parameters. Now I do care.