Re:WebServerUid: Easy Unique Browser IDs for Rails
by geweke on Monday February 24, 2014 @06:33PM
(#7294127)
What, in particular, is problematic about them? Do you mean their particular implementation, the fact that they aren't also encrypted, or the general "password equivalent in a cookie" concept overall?
[ Parent
| on HN ]
Re:WebServerUid: Easy Unique Browser IDs for Rails
by jcampbell1 on Monday February 24, 2014 @10:20PM
(#7295176)
Yeah, the one ring to rule them all problem. One bad employee, or one of the many rails zero-day issues, potentially compromises the site indefinitely for all eternity.