3 ms·

If I remember correctly, something similar demonstrated by someone(a bounty hunter) a few months back, and was featured on HN front page as well. I remember it

If I remember correctly, something similar demonstrated by someone(a bounty hunter) a few months back, and was featured on HN front page as well. I remember it was maybe related to Facebook, and not to TLS/SSL specifically. Very similar.. sending excessively long session id values. I wonder if excessively long session id values can break something else as well?

farness 12y ago
Excessively long data is a cornerstone of security vulnerabilities. > I wonder if excessively long session id values can break something else as well? Yes, with p~=1.
- rikacomet 12y ago
  Indeed it is, but what I was curious to know more about the particular case of session IDs.