Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: Cookies as the second factor |
|---|---|
| Date: | Tue, 18 Jul 2006 13:01:20 -0400 |
-----Original Message----- From: Ryan Barnett [mailto:rcbarnett@gmail.com] I think we are mixing persistent/session cookie concepts here. I believe that the scenario that Jeff was trying to describe (and please correct me Jeff if I am wrong here) is if you use both a password and a persistent cookie to initially log into an appliaction and then the app can issue whatever sesisonid cookies it needs to track the session state and provide authorization.
Yes, this is the kind of thing I was thinking about. ------------------------------------------------------------------------- Sponsored by: Watchfire AppScan 6.5 is now available! New features for Web Services Testing, Advanced Automated Capabilities for Penetration Testers, PCI Compliance Reporting, Token Analysis, Authentication testing, Automated JavaScript execution and much more. Download a Free Trial of AppScan today! https://www.watchfire.com/securearea/appscancamp.aspx?id=70150000000CYkc -------------------------------------------------------------------------
| Previous by Date: | RE: Cookies as the second factor, Randy Ollett |
|---|---|
| Next by Date: | Re: Cookies as the second factor, Ryan Barnett |
| Previous by Thread: | Re: Cookies as the second factor, Ryan Barnett |
| Next by Thread: | RE: Cookies as the second factor, Matt Fisher |
| Indexes: | [Date] [Thread] [Top] [All Lists] |