News for hackers. Stuff that matters.

A comment on Typing the Letters A-E-S Into Your Code (2009). Parent comment

Re:Typing the Letters A-E-S Into Your Code (2009) by Kliment on Saturday January 10, 2015 @06:18AM (#8866565)
Plaintext SID? Couldn't you just replay that SID then? Or generate random SIDs and see what sticks?
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by seszett on Saturday January 10, 2015 @06:53AM (#8866625)
If your SIDs are large enough, it's no different from generating random encrypted cookies until one works, so not practical at all.
[ Parent | on HN ]