lanadelrey

4 ms·

1. 1.▲
   Browsers which allow JavaScript to overwrite HttpOnly cookie(resources.infosecinstitute.com)

   3 points by lanadelrey 12y ago|0 comments
2. 2.▲
   by lanadelrey 12y ago

   Ahhhh that makes sense. I was incorrect in assuming the entire page had to be https. I'm sure google will change this quick, with google+ and all.
3. 3.▲
   by lanadelrey 12y ago

   I was able to sniff out my session id, however it can't be set by javascript since it's httponly. But what about the password? I haven't found it in plain text, so I guess it could be hashed? I'm a developer, but this is
4. 4.▲
   Is Twitch login insecure? It doesn't use https.(twitch.tv)

   1 points by lanadelrey 12y ago|3 comments