Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

For anyone interested, if you want to see the information it is storing then take the NewUniversalCookie and seperate it by the #'s then you can see two base64 strings which are easily decoded

The scary part is that the 'alias' id is actually one of the 2 passwords needed to log into the account. So in fact if someone had that and my card number all they would need is the 5 digit numerical code to log in



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: