Tag Info

New answers tagged

2

You really can't. The issue is that the cookies are client-side and there are only two methods to fix the problem: ignore/accept the cookies or delete them. The former is probably easier than the latter, but I would not recommend it. There's a reason to keep cookies small -- they're not the full meal. (Why on earth would a server want to accept a ...


3

Most browsers have a limit on how many cookies they'll store for a single TLD. So, if the server is configured to allow a sufficiently large request to include all these cookies, the requests won't be rejected anymore. Apache has options like LimitRequestFields, LimitRequestFieldSize, etc. Setting these sufficiently high should allow the request to be ...


5

When you use an "authentication token", the simple presentation of that token by the client grants access (as long as the token is deemed valid by the server). If you store the tokens "as is" in your server's database, then an attacker who could get a glimpse at your database will immediately learn all the tokens, allowing him to send requests in the name of ...


0

A Cookie allows a website to place a small file on your computer, which is usually used as an "identifier" that then can then go do a query against in their database and go "ah, this is customer X who was browsing Y earlier today" - normally (outside of security exceptions which are patched), a site can only read it's own cookies, however, many rely on a ...


2

This sounds like a Zombie Cookie. There are a large number of places a web site can store state: cookies, Flash local storage, ETags, etc. When you clear your cookies, you do not necessarily clear all these places. Web sites can store an identifier in some of these other places, and track users despite them clearing their cookies. If you use a dedicated ...


3

Banks like BoA use a risk-based decision engine that examines several variables, including but not limited to: Your visible IP address Your brower's "signature," which incudes the user agent header and detectable display properties such as screen resolution The presence of a persistent cookie The presence of data in another persistent store, such as a ...



Top 50 recent answers are included