WebApp Sec mailing list archives
Re: Cookies as the second factor
From: "Robert Hajime Lanning" <robert.lanning () gmail com>
Date: Thu, 20 Jul 2006 18:33:11 -0700
On 7/20/06, Jeff Robertson <jeff.robertson () digitalinsight com> wrote:
A) Does this qualify as "something you have", in any definition of the term? B) Regardless of (A), does it have much security value anyway?
A) no. way to easy to copy or erase. (delete all cookies is a standard fixit measure) B) no. way to easy to copy. -- And, did Guloka think the Ulus were too ugly to save? -Centauri ------------------------------------------------------------------------- Sponsored by: WatchfireAppScan 6.5 is now available! New features for Web Services Testing, Advanced Automated Capabilities for Penetration Testers, PCI Compliance Reporting, Token Analysis, Authentication testing, Automated JavaScript execution and much more. Download a Free Trial of AppScan today!
https://www.watchfire.com/securearea/appscancamp.aspx?id=70150000000CYkc -------------------------------------------------------------------------
Current thread:
- Re: Cookies as the second factor, (continued)
- Re: Cookies as the second factor Ryan Barnett (Jul 18)
- RE: Cookies as the second factor Jeff Robertson (Jul 18)
- RE: Cookies as the second factor Matt Fisher (Jul 18)
- Re: Cookies as the second factor Ryan Barnett (Jul 18)
- Re: Cookies as the second factor Darren Bounds (Jul 18)
- Re: Cookies as the second factor mikeiscool (Jul 18)
- Re: Cookies as the second factor Darren Bounds (Jul 18)
- RE: Cookies as the second factor Jeff Robertson (Jul 20)
- Re: Cookies as the second factor Robert Hajime Lanning (Jul 20)
- Re: Cookies as the second factor Peter Watkins (Jul 21)
- RE: Cookies as the second factor Arian J. Evans (Jul 25)