I believe the implication is that you'd have a sessionid. Effectively, the usern... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

e1ven on June 3, 2009 | parent | context | favorite | on: How I Hacked Hacker News (with arc security adviso...

I believe the implication is that you'd have a sessionid. Effectively, the username and password rolled into one unique number, stored in the cookie.

dfranke on June 3, 2009 [–]

I think by 'specific account' he means 'chosen account', in which case he'd be correct without more targeted social engineering.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact