WebApp Sec mailing list archives

Re: Cookies as the second factor


From: "Robert Hajime Lanning" <robert.lanning () gmail com>
Date: Thu, 20 Jul 2006 18:33:11 -0700

On 7/20/06, Jeff Robertson <jeff.robertson () digitalinsight com> wrote:
A) Does this qualify as "something you have", in any definition of the
term?
B) Regardless of (A), does it have much security value anyway?

A) no.  way to easy to copy or erase.  (delete all cookies is a
standard fixit measure)
B) no.  way to easy to copy.

--
And, did Guloka think the Ulus were too ugly to save?
                                        -Centauri

-------------------------------------------------------------------------
Sponsored by: Watchfire

AppScan 6.5 is now available! New features for Web Services Testing, Advanced Automated Capabilities for Penetration Testers, PCI Compliance Reporting, Token Analysis, Authentication testing, Automated JavaScript execution and much more. Download a Free Trial of AppScan today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=70150000000CYkc
-------------------------------------------------------------------------


Current thread: