Cookies on Karpoke - Just Another Blog

Consent-O-Matic: Extensión de navegador que rellena automáticamente las ventanas emergentes de cookies en función de tus preferencias

Sun, 07 May 2023 19:47:38 +0100

Browser extension that automatically fills out cookie popups based on your preferences - cavi-au/Consent-O-Matic

» GitHub | github.com

Today's rabbit hole: securing JWTs for authentication, httpOnly cookies, CSRF tokens, secrets & more

Tue, 25 Aug 2020 22:04:11 +0100

Note: this is first and foremost the tale of a journey. It acts as a how-to, but I also want to share…

» DEV Community | dev.to

11 Ways To Track Your Moves When Using a Web Browser

Sun, 15 Mar 2015 12:21:00 +0100

some tracking methods do attempt to track the user over a long time, and in particular attempt to make it difficult to evade the tracking. This is sometimes done for advertisement purposes, but can also be done to stop certain attacks like brute forcing or to identify attackers that return to a site. In its worst case, from a private perspective, the tracking is done to follow a user across various web sites. Over the years, browsers and plugins have provided a number of ways to restrict this tracking. Here are some of the more common techniques how tracking is done and how the user can prevent (some of) it

Unsafe cookies leave WordPress accounts open to hijacking, 2-factor bypass

Mon, 26 May 2014 21:50:00 +0100

Yan Zhu, a staff technologist at the Electronic Frontier Foundation, came to that determination after noticing that WordPress servers send a key browser cookie in plain text, rather than encrypting it, as long mandated by widely accepted security practices. The cookie, which carries the tag ”wordpress_logged_in,” is set once an end user has entered a valid WordPress user name and password. It’s the website equivalent of a plastic bracelets used by nightclubs. Once a browser presents the cookie, WordPress servers will usher the user behind a velvet rope to highly privileged sections that reveal private messages, update some user settings, publish blog posts, and more. The move by WordPress engineers to allow the cookie to be transmitted unencrypted makes them susceptible to interception in many cases.