News for hackers. Stuff that matters.

A comment on Klarna users are being signed in to random accounts. Parent comment

Re:Klarna users are being signed in to random accounts by remram on Thursday May 27, 2021 @12:26PM (#27304896)
In this context, this would just prevent everybody from logging in. The JWT would correctly get rejected but people would still be getting the wrong token from the CDN over and over.
[ Parent | on HN ]
Re:Klarna users are being signed in to random accounts by iratewizard on Thursday May 27, 2021 @04:16PM (#27307787)
Which would you rather? The situation you just described or users accidentally spoofing each other's session?
[ Parent | on HN ]