Phising, posting on an exploitable forum site with an specially crafted img, sure, extensions, maybe badly coded extensions
GBATemp Account Exploit
- Thread starter DavidRO99
- Start date
- Views 4,854
- Replies 67
- Likes 2
- Status
pizza hut, mother, father?
(my three choices)
D
Deleted User
Guest
Uber has a app, pizza hut is garbage, use a burner phone for stripper.
This is completely standard behaviour and not really an issue at all for most people. If your browser didn't save session tokens then you'd constantly be manually re-authenticating with the site, which would be an undeniable pain in the ass.
Feel free to just block cookies from this domain if it's a problem for you though.
Feel free to just block cookies from this domain if it's a problem for you though.
If someone has access to your cookies, then you have far bigger things to worry about.
Security issues should not be discussed in an open forum to prevent giving nefarious people bad ideas. Always direct security issues to the admins.
Though in this particular case I think it can be argued whether this is a security issue or not.
Though in this particular case I think it can be argued whether this is a security issue or not.
I'm going to add to this for people who do find a security bug. Report it to the whoever runs it, but make sure to give them a suitable time frame to fix it and release the bug if they don't. It's dangerous if bugs go unfixed, and many companies just won't take it seriously until it's public knowledge.
- Joined
- Jul 13, 2014
- Messages
- 6,038
- Trophies
- 2
- Age
- 25
- Location
- https://gs2012.xyz
- Website
- gs2012.xyz
- XP
- 5,986
- Country
Ask him to take you to his work and wear a shirt with Smea's profile pic
Sent from my cave of despair where I collect souls
Wouldn't you already need some kind of trojan in someone's computer to export their cookies? And you can just export their saved passwords..
I'm relatively sure that xenforo does use sql. However, a sql injection is unlikely in paid, professional software. Not saying it's impossible, butbecause the databases are in csv?
- Status
Similar threads
-
@
Maximumbeans:
Man, that's beyond my brain I'm no good with hardware for now. I'd like to get into hardmods in future though -
@
SylverReZ:
@Maximumbeans, Maybe start practice soldering. Get a cheap-ass soldering iron and follow some good YouTube tutorials.+1 -
@
SylverReZ:
Least my experience has gotten better than over a decade ago. My iron would constantly bump into components and break them.
-
@
Maximumbeans:
Sounds good. I actually did soldering but like 16 years ago for school so uuuuh probably rusty haha
-
@
SylverReZ:
@Maximumbeans, Same here. I did soldering at school from a teacher who I honestly liked since he had plenty of good electronics experience.+1
-
-
-
-
-
@
SylverReZ:
It was like all clear and fancy. Tbf I'm not too experienced with chess, but would like to learn someday.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
