News for hackers. Stuff that matters.
Re:What Have We Forgotten? by jalk on Wednesday January 29, 2025 @07:44AM (#42864250)
The browser session concept has “eroded” over time. Many, if not most, laptop users rarely closer all browser windows and hence sessions can last months. Haven’t checked but I wouldn’t be surprised if session cookies survive a browser update, started from the menu at
Re:What Have We Forgotten? by Ekaros on Wednesday January 29, 2025 @07:46AM (#42864268)
It does. Google is good example. I have fully closed my computer for a while and restarted it and session is still there. It is amazing just how long they can last if you regularly use it.
Re:What Have We Forgotten? by jalk on Wednesday January 29, 2025 @09:47AM (#42865464)
I believe that google login cookies, are persistent cookies with a longish max-age/expires value, so that is not surprising, and hence why you have to use google periodically to "refresh" the cookies.

Here is what MDN[1] says about session cookies:

> Session cookies — cookies without a Max-Age or Expires attribute – are deleted when the current session ends. The browser defines when the "current session" ends, and some browsers use session restoring when restarting. This can cause session cookies to last indefinitely.

I was unaware of the "session restoring" point. This has to be considered if wanting to "unforget" the use of session cookies.

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies

(edit for layout)