3 ms·

Damn! I just realized, github is getting a full 1% of baidu's traffic. I wonder if they're getting the search terms. I bet they're getting cookies. The ultimat

by jfoutz 12y ago

Damn! I just realized, github is getting a full 1% of baidu's traffic. I wonder if they're getting the search terms. I bet they're getting cookies. The ultimate mitigation might be google paying to show the results instead of baidu. Or just showing their own ads.

jonny_eh 12y ago
Github wouldn't get baidu's cookies since they're different domains.
- eloisant 12y ago
  They could if they put code to read cookies in JS and send them home in the JS included in people's pages.
  - jonny_eh 12y ago
    Good point, all the more reason page authors should use httpOnly cookies: https://www.owasp.org/index.php/HttpOnly https://www.owasp.org/index.php/HttpOnly