I specified C++ in my original point, which are identical except that classes have private members by default where structs have public members by default. That is the only difference between classes and structs in C++.
As for my argument with GAMEchief, I was correct.
Edit: As you can't see my side of the argument with him, it'll look as if I didn't understand HTTPOnly cookies. On the contrary, I was pointing out that HTTPOnly cookies do not render cookie grabbing on Gaia impossible.
Edit2:
The response does, in fact, contain the cookie, and it can be read.To the contrary, the flash games do not have access to the cookies. An HTTPOnly cookie means it can only be read by the browser during HTTP requests only, not anything within the browser (including JavaScript and flash). The flash game sends the request to the server, during which the browser sends the session cookie (as it's an HTTP request), and the server sends the response after validating the session. There is nothing a phisher can do in-browser to figure out the session cookie value. The phisher can send as many page requests as he wants, which will also send the session, but the neither JavaScript nor the flash games themselves are able to read the cookies - merely interpret the response. Since the response won't include the cookie value, there is no method of reading it.
I could write an analogy for you, but I assume you understand that.
Edit3: I'm clearly referring to the 109 method of GSI.
Results 1 to 35 of 35
Thread: Gaia question
Hybrid View
- 06 Jun. 2012 08:43pm #1
Last edited by Personoid; 06 Jun. 2012 at 08:49pm.