Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

VERY interesting, thanks for sharing! I'll have to play around with this a bit...


Yeah it's a neat attack. pretty glaring info leak imho. Even an empty array response can expose login status




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: