The intent of the piece was to tell people about a neat trick I'd discovered. Nothing more.
Which sites you log into, is private information.
The Firefox addon "Request Policy" does protect from this attack, but it's not the most user friendly way to browse the web. I've been trying it out myself the past couple of days. Fine for geeks, but not fine for the average user.
You said "Which sites you log into" but mean "Which sites you maintain a persistent log in on" which are two very different things.
The post you responded to is correct in that the title is somewhat incendiary compared to the reality, unless there is some possible hijacking or scraping vector from this, but that seems massively unrealistic.
Comments
The intent of the piece was to tell people about a neat trick I'd discovered. Nothing more.
Which sites you log into, is private information.
The Firefox addon "Request Policy" does protect from this attack, but it's not the most user friendly way to browse the web. I've been trying it out myself the past couple of days. Fine for geeks, but not fine for the average user.
You said "Which sites you log into" but mean "Which sites you maintain a persistent log in on" which are two very different things.
The post you responded to is correct in that the title is somewhat incendiary compared to the reality, unless there is some possible hijacking or scraping vector from this, but that seems massively unrealistic.
For the average user "Which sites you log into" and "Which sites you maintain a persistent log in on" are equivalent.