undefined | Better HN

0 pointsnetsharc8y ago0 comments

Interestingly the password "BAAAD" would generate 3 requests to the logging server, since it wouldn't request the background image for the letter "A" more than one time. Or shouldn't, anyway.

0 comments

1 comments · 1 top-level

early8y ago

That depends on cache headers sent from the server, which the attacker controls

j / k navigate · click thread line to collapse