News for hackers. Stuff that matters.
Re:Firesheep: Easy HTTP session hijacking from within Firefox by cdine on Monday October 25, 2010 @12:45AM (#1828593)
Yup, they're one of our examples of a "good" setup. However, Google leaks iGoogle and some other things (Latitude, address book, reader, ...)
Re:Firesheep: Easy HTTP session hijacking from within Firefox by itsnotvalid on Monday October 25, 2010 @05:30AM (#1829131)
However they don't share the same session cookie for different service as far as I know (which they negotiate that through TLS protected link) Likewise they have also made several other services TLS only (e.g. calendar, docs)