RE: Moscow Fax intercept procedure, Neuroscience Marketing Scheme rs

[Elliott Roberts <ERoberts@apclink.com>]

[: hacktivism :]

I believe that you are correct. But, the cookie has to be written in such a
way as to be read by another domain. So, espn.com has to write the cookie so
that go.com can read it. That means NO site can read "all" your cookies from
other sites. Giving your e-mail to excite.com  will not mean that cdnow.com
can find your e-mail in a cookie written by excite.com. Unless of course the
excite.com cookie is written so that it can.

Everyone confused yet?

Elliott Roberts
Internet/Web Developer
Affiliated Paper Companies
eroberts@apclink.com

-----Original Message-----
From: Nomad Media Lab [mailto:eric@nomadlab.com]
Sent: Monday, November 15, 1999 1:17 PM
To: 'hacktivism@tao.ca'
Subject: RE: Moscow Fax intercept procedure, Neuroscience Marketing
Scheme rs


[: hacktivism :]


You are correct on all points, except one. It is indeed possible for a
cookie to be read by a server/domain that did not write it (yes, I have
even coded such beasts for a client once, so that people could register
on one site for access to another. the first site wrote the cookie that
determined the level of access to the second domain).
 This is why both netscape and microsoft include an option in the
applications preferences to only allow the domain that wrote the cookie
read it. 



[: hacktivism :]
[: for unsubscribe instructions or list info consult the list FAQ :]
[: http://hacktivism.tao.ca/ :]