View Single Post
Old 11-15-2008, 05:28 PM  
Machete_
WINNING!
 
Industry Role:
Join Date: Oct 2002
Posts: 14,579
Quote:
Originally Posted by borked View Post
mkay... just to give a couple of examples from this year where https means shit
http://www.kb.cert.org/vuls/id/249337
http://news.netcraft.com/archives/20...ecurit y.html

https is secure, but it doesn't mean it isn't vulnerable

Anyway, his session ended, but still always best to not give away session ids.
One is from 2007 and both are theoretical Vulnerability
The .netcraft story hold no value or facts at all
Machete_ is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook