TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Skype Bug Lets Users Hijack Accounts

18 点作者 fafssaf将近 14 年前

2 条评论

cipherpunk将近 14 年前
A remote exploit in the Skype application that allows account theft is `minor', because, ``as you can imagine, someone who you deal with frequently is probably unlikely to take advantage of this bug anyways.''<p>Give me a moment to collect my jaw from the floor.
评论 #2785092 未加载
评论 #2785743 未加载
kevingadd将近 14 年前
My favorite part of this is that for some reason, the HTML document they're using to display (unsanitized) user details in the Skype application has a cookie set that contains the logged in user's login token. Why is that even necessary to display another user's profile?