News for hackers. Stuff that matters.

A comment on Gmail XSRF?.

Re:Gmail XSRF? by colinsidoti on Saturday April 09, 2011 @03:21PM (#2427867)
Taking steps to prevent malicious logouts would mean that you're creating cases where a logout will not succeed. This opens the possibility of having a bug that prevents people from logging out at all, even if they want to.

Would you rather have a bug that allows logouts, or a bug that prevents them?

That said, I would love for Facebook to put this snippet in their footer.

[ Parent | on HN ]
Re:Gmail XSRF? by hollerith on Saturday April 09, 2011 @03:39PM (#2427921)
>That said, I would love for Facebook to put this snippet in their footer.

Google has an effective way to retaliate. Consider all those non-expert users who type "facebook" in the search bar to get to Facebook and who do not know the difference between the search bar and the location bar.

[ Parent | on HN ]