| 00:00.41 | mgeary | the scenario is that domain A says that they set a cookie with user credentials when the user clicks âremember meâ before logging in. They claim that from my domain (domain B), i will be able to access that. Iâm sure thereâd have to be some sort of whitelisting process, or this would be a gaping security hole |
| 00:14.36 | jsmith | Right -- typically the way they get around that is with DNS records |
| 00:15.22 | jsmith | So, say they make domain-a.domain-b.com as a CNAME record that points to domain A's server |
| 00:17.11 | jsmith | And load an image (or use Javascript) to load something from the domain-a.domain-b.com server, thus setting a cookie that the "real" domain-b.com can read. |
| 00:17.30 | jsmith | That's exactly how things like Omniture/Adobe SiteCatalyst work |
| 00:20.44 | jsmith | Just google for their "2o7.net" cookie |
| 01:06.15 | *** join/#uphpu infobot (ibot@69-58-76-73.ut.vivintwireless.net) |
| 01:06.15 | *** topic/#UPHPU is TONIGHT: ReactJS + Existing PHP Apps | Utah PHP Users Group | uphpu.org |
| 01:06.15 | *** mode/#UPHPU [+v infobot] by ChanServ |
| 01:31.18 | *** join/#uphpu itimber (~Adium@2600:100a:b02c:966e:1167:c8e3:4720:565a) |
| 01:31.18 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 02:17.13 | *** join/#uphpu clintberry (~clintberr@170-72-15-42.ut.vivintwireless.net) |
| 02:17.13 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 04:23.53 | *** join/#uphpu stevecoug (~stevecoug@oalug/member/stevecoug) |
| 04:23.53 | *** mode/#UPHPU [+v stevecoug] by ChanServ |
| 04:37.49 | *** join/#uphpu clintberry (~clintberr@170-72-15-42.ut.vivintwireless.net) |
| 04:37.49 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 12:45.24 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 12:45.24 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 13:54.43 | *** join/#uphpu josephscott (~josephsco@192.0.80.201) |
| 13:57.21 | *** join/#uphpu bbankes (~bbankes@50-200-100-242-static.hfc.comcastbusiness.net) |
| 14:27.25 | *** join/#uphpu stevecoug (~stevecoug@oalug/member/stevecoug) |
| 14:27.26 | *** mode/#UPHPU [+v stevecoug] by ChanServ |
| 15:27.08 | *** join/#uphpu clintberry (~clintberr@112.sub-70-208-8.myvzw.com) |
| 15:27.08 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 16:54.21 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 16:54.21 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 17:03.50 | herlo | jsmith: that's not a cookie if you ask me. That's a pixel tracking tool. But I get your point. |
| 17:07.59 | jsmith | herlo: Well, how do you think the pixel trackers track you across sites -- by using cookies! |
| 17:08.03 | jsmith | (among other things) |
| 17:32.03 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 17:32.03 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 17:37.33 | *** join/#uphpu josephscott (~josephsco@192.0.80.201) |
| 17:57.13 | *** join/#uphpu fungus (~fungus@delta.myfungus.net) |
| 17:57.13 | *** mode/#UPHPU [+o fungus] by ChanServ |
| 19:29.26 | *** join/#uphpu stevecoug (~stevecoug@oalug/member/stevecoug) |
| 19:29.26 | *** mode/#UPHPU [+v stevecoug] by ChanServ |
| 19:35.00 | *** join/#uphpu mgeary (~mgeary@75-144-8-210-utah.hfc.comcastbusiness.net) |
| 19:35.00 | *** mode/#UPHPU [+v mgeary] by hitchcock.freenode.net |
| 19:47.43 | *** join/#uphpu josephscott (~josephsco@192.0.125.251) |
| 19:52.36 | *** join/#uphpu mgeary (~mgeary@75-144-8-210-utah.hfc.comcastbusiness.net) |
| 19:52.36 | *** mode/#UPHPU [+v mgeary] by hitchcock.freenode.net |
| 20:49.27 | *** join/#uphpu stevecoug (~stevecoug@oalug/member/stevecoug) |
| 20:49.27 | *** mode/#UPHPU [+v stevecoug] by ChanServ |
| 21:15.29 | *** join/#uphpu SunSparc (~jonathan@23-228-171-163.mci.googlefiber.net) |
| 21:15.30 | *** mode/#UPHPU [+v SunSparc] by ChanServ |
| 22:43.09 | *** join/#uphpu clintberry (~clintberr@170-72-15-42.ut.vivintwireless.net) |
| 22:43.09 | *** mode/#UPHPU [+v clintberry] by ChanServ |