▲ 992 ▼ And the city would even place them at booths all over for the public's doxxing convenience (lemmy.world) submitted 2 years ago by The_Picard_Maneuver@lemmy.world [M] to c/memes@lemmy.world 107 comments fedilink hide all child comments
[–] pascal@lemm.ee 1 point 2 years ago (1 child) Was that guy the owner of the wow armory? Because otherwise... how did they get your cookie store inside your browser? permalink fedilink source parent hideshow 2 child comments replies: [–] CosmicCleric@lemmy.world 1 point 2 years ago* Was that guy the owner of the wow armory? Because otherwise… No, he was another player/customer. See below. how did they get your cookie store inside your browser? When you pull up a character on the Armory inside of the cookie/memory information was a list of all the other characters for that same account/character. And anyone can pull up any other account characters name on the Armory. My guess is the list of all the character names for the account was there so if you wanted to switch between one character to another from a drop-down UI object. My point is developers can leak additional information assuming that users can't see it because it's not displayed on the UI, but if somebody goes into the developer mode on the browser they can inspect all the memory/cookie information for that web page. Finally, this was a long time ago, so who knows if it still works that way today or not. My point of mentioning it was as an anecdote on how additional information can leak in ways we wouldn't suspect. permalink fedilink source parent
[–] CosmicCleric@lemmy.world 1 point 2 years ago* Was that guy the owner of the wow armory? Because otherwise… No, he was another player/customer. See below. how did they get your cookie store inside your browser? When you pull up a character on the Armory inside of the cookie/memory information was a list of all the other characters for that same account/character. And anyone can pull up any other account characters name on the Armory. My guess is the list of all the character names for the account was there so if you wanted to switch between one character to another from a drop-down UI object. My point is developers can leak additional information assuming that users can't see it because it's not displayed on the UI, but if somebody goes into the developer mode on the browser they can inspect all the memory/cookie information for that web page. Finally, this was a long time ago, so who knows if it still works that way today or not. My point of mentioning it was as an anecdote on how additional information can leak in ways we wouldn't suspect. permalink fedilink source parent
