News for hackers. Stuff that matters.

A comment on Simplified Sign-Up and Log-In Flows. Parent comment

Re:Simplified Sign-Up and Log-In Flows by decode on Wednesday February 15, 2012 @04:47PM (#3596244)
I'm using the Firefox add-on version 1.7.8, with the default URL Components settings (subdomains not enabled), and it uses "bbc.co.uk" as the domain for "www.bbc.co.uk" and "evil.co.uk" as the domain for "evil.co.uk", so the problem you described doesn't exist.

Maybe this was a problem in an earlier version and it's been fixed?

[ Parent | on HN ]
Re:Simplified Sign-Up and Log-In Flows by cpeterso on Wednesday February 15, 2012 @08:13PM (#3596958)
I'll have to double-check. The problem is still reproducible on the (albeit limited) PasswordMaker online version:

http://passwordmaker.org/passwordmaker.html

[ Parent | on HN ]