you put the session id inside the url params :3 | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

kappaloris on July 29, 2012 | parent | context | favorite | on: Captchas Are Becoming Ridiculous

you put the session id inside the url params :3

neurostimulant on July 29, 2012 [–]

But then the session id can leak via referer header :(

dvhh on July 30, 2012 | [–]

He was suppose to give a solution to parent's question, not necessary a secure one.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact