Changing Your LinkedIn Password Still May Not Have Kept Your Account Safe

Re:Changing Your LinkedIn Password Still May Not Have Kept Y... by tedunangst on Saturday June 23, 2012 @05:30PM (#4151868)

I suspect that back door is a browser cookie. Tons of sites don't deauth old cookies on password change. Hacker News being one of them. Why doesn't anybody freak out over the HN backdoor?

[ Parent | on HN ]

Re:Changing Your LinkedIn Password Still May Not Have Kept Y... by btilly on Saturday June 23, 2012 @06:44PM (#4152005)

Then capture that cookie over the wire, and voila you are in.

[ Parent | on HN ]