Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Javascript] Can I Give Myself a Cookie ?


  • From: christ at saeweb.com (Chris Tifer)
  • Subject: [Javascript] Can I Give Myself a Cookie ?
  • Date: Tue Apr 22 08:08:07 2003

I guess David's looking at it through the eyes of a possible hacker,
but one shouldn't be able to gain access to cookies through any
IE exploits.  Most if not all have been patched.

Theoretically it wouldn't be very hard though if I could get a
simple .js file on your system that you run outside the context
of your browser. Using FSO (the File System Object), it'd be
pretty easy to find your cookies since the path is usually the same
on most PC's.

That being said, I use cookies liberally. Some are encrypted, some
aren't.

Chris Tifer
http://emailajoke.com




----- Original Message -----
From: "T. Bradley Dean" <tbdean_lists@xxxxxxxxxx>
To: "'[JavaScript List]'" <javascript@xxxxxxxxxx>
Sent: Monday, April 21, 2003 10:50 PM
Subject: RE: [Javascript] Can I Give Myself a Cookie ?


> David T. Lovering wrote:
> >A web site that you visit could just as well
> >scan ALL your cookies for lightly encoded objects,
>
> Web sites only have access to cookies they write. A web site would not be
> able to "scan ALL your cookies".
>
> Used properly and responsibly (for example, to store a user id number
which
> correlates to information about a user stored server site) cookies are a
> safe and convenient way to store user data.
>
> ~Brad
>
> _______________________________________________
> Javascript mailing list
> Javascript@xxxxxxxxxx
> https://lists.LaTech.edu/mailman/listinfo/javascript