[Javascript] Can I Give Myself a Cookie ?

[Chris Tifer]

I guess David's looking at it through the eyes of a possible hacker,
but one shouldn't be able to gain access to cookies through any
IE exploits.  Most if not all have been patched.

Theoretically it wouldn't be very hard though if I could get a
simple .js file on your system that you run outside the context
of your browser. Using FSO (the File System Object), it'd be
pretty easy to find your cookies since the path is usually the same
on most PC's.

That being said, I use cookies liberally. Some are encrypted, some
aren't.

Chris Tifer
http://emailajoke.com




----- Original Message -----
From: "T. Bradley Dean" <tbdean_lists at tbdean.com>
To: "'[JavaScript List]'" <javascript at LaTech.edu>
Sent: Monday, April 21, 2003 10:50 PM
Subject: RE: [Javascript] Can I Give Myself a Cookie ?


> David T. Lovering wrote:
> >A web site that you visit could just as well
> >scan ALL your cookies for lightly encoded objects,
>
> Web sites only have access to cookies they write. A web site would not be
> able to "scan ALL your cookies".
>
> Used properly and responsibly (for example, to store a user id number
which
> correlates to information about a user stored server site) cookies are a
> safe and convenient way to store user data.
>
> ~Brad
>
> _______________________________________________
> Javascript mailing list
> Javascript at LaTech.edu
> https://lists.LaTech.edu/mailman/listinfo/javascript