Comments on: 缺乏IT知識的政府完全不懂甚麼是cookie http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/ 為了帥氣，人可以犧牲性命。甚麼是帥氣？忠實地體現自己的生命價值觀，這就是帥氣了。 Sun, 20 May 2012 19:30:08 +0000 http://wordpress.org/?v=2.2.1 By: kentsin http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16740 kentsin Thu, 18 Nov 2010 01:40:11 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16740 當初 http 是無 state 的, 因為好多時要有 state 所以臨時臨急搞咗個cookie. 順便講句 cookie 出處是竹昇中國餐飲文化, 本來就是亂來的 Cookie 不留都不安全的, 有興趣的 google 下 cookie exploit 當初 http 是無 state 的, 因為好多時要有 state 所以臨時臨急搞咗個cookie.

順便講句 cookie 出處是竹昇中國餐飲文化, 本來就是亂來的

Cookie 不留都不安全的, 有興趣的 google 下 cookie exploit

]]> By: ShawTim http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16739 ShawTim Tue, 16 Nov 2010 17:18:23 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16739 我都係咁話，一定唔可以俾佢連任！ 我都係咁話，一定唔可以俾佢連任！

]]> By: Zeus Cho http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16735 Zeus Cho Sun, 17 Oct 2010 03:45:08 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16735 譚偉豪做廠，單仲楷做IT，譚偉豪係戇豆好正常。上次我無資格投票，下次立會選舉我一定唔會比佢連任。 譚偉豪做廠，單仲楷做IT，譚偉豪係戇豆好正常。上次我無資格投票，下次立會選舉我一定唔會比佢連任。

]]> By: ShawTim http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16724 ShawTim Sun, 10 Oct 2010 13:38:26 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16724 佢唔識就認啦，但又要扮代表，真係激死人呀 加左一小段講多少少cookie 佢唔識就認啦，但又要扮代表，真係激死人呀

加左一小段講多少少cookie

]]> By: V for vendetta http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16723 V for vendetta Sun, 10 Oct 2010 12:11:32 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16723 唉,單仲楷話哂係HSBC做真正既IT, 譚生其實係做embedded system (快譯通)...唔好望佢識太多Internet既野啦... 唉,單仲楷話哂係HSBC做真正既IT, 譚生其實係做embedded system (快譯通)…唔好望佢識太多Internet既野啦…

]]> By: ShawTim http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16722 ShawTim Sun, 10 Oct 2010 08:42:44 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16722 @wanleung 這是應當的 @krisjuan 哈哈，其實我偷換了一點概念被你看出來了。正確點說，一是很危險，一是很戇居。怎麼戇居法呢，由於不用cookie關係每個request也會是stateless的，先不管user flow state之類，單單是login這個步驟也要每個request重新做一次。而且一是要求用家每頁都打一次password(好安全！)，一是我把password在頁面上render出來。所以大家才用cookie嘛... 我太懶沒有打出來，被你看出來了 @wpkf 對呀，所以來年一定要拿到投票權... @wanleung 這是應當的
@krisjuan 哈哈，其實我偷換了一點概念被你看出來了。正確點說，一是很危險，一是很戇居。怎麼戇居法呢，由於不用cookie關係每個request也會是stateless的，先不管user flow state之類，單單是login這個步驟也要每個request重新做一次。而且一是要求用家每頁都打一次password(好安全！)，一是我把password在頁面上render出來。所以大家才用cookie嘛… 我太懶沒有打出來，被你看出來了
@wpkf 對呀，所以來年一定要拿到投票權…

]]> By: wpkf http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16721 wpkf Sat, 09 Oct 2010 15:04:41 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16721 "不懂網絡知識的人去當資訊科技界立法會議員", 邊鬼個選佢出嚟架? “不懂網絡知識的人去當資訊科技界立法會議員”, 邊鬼個選佢出嚟架?

]]> By: wpkf http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16720 wpkf Sat, 09 Oct 2010 15:01:38 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16720 我睇新聞時都覺得奇...用咩方式"LOGIN"都會收集到你嘅usage pattern, 除非你唔畀佢認到架唧 (咁...又點網上銀行) 我睇新聞時都覺得奇…用咩方式”LOGIN”都會收集到你嘅usage pattern, 除非你唔畀佢認到架唧 (咁…又點網上銀行)

]]> By: krisjuan http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16719 krisjuan Sat, 09 Oct 2010 07:02:48 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16719 寫得幾好... 不過有一點要改一改... 唔用 cookie 唔會更危險, 除咗 query string 之外, 仲可以用 input hidden field... 例如 canary 就係一個好例子啦... 如果個白痴 server 見倒你打 &username=shawtim 就信你係, 咁個 system 要去自殺, 無人幫倒佢... 寫得幾好… 不過有一點要改一改…

唔用 cookie 唔會更危險, 除咗 query string 之外, 仲可以用 input hidden field… 例如 canary 就係一個好例子啦…

如果個白痴 server 見倒你打 &username=shawtim 就信你係, 咁個 system 要去自殺, 無人幫倒佢…

]]> By: wanleung http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16718 wanleung Sat, 09 Oct 2010 06:28:14 +0000 http://blog.shawtim.com/index.php/2010/10/09/%e7%bc%ba%e4%b9%8fit%e7%9f%a5%e8%ad%98%e7%9a%84%e6%94%bf%e5%ba%9c%e5%ae%8c%e5%85%a8%e4%b8%8d%e6%87%82%e7%94%9a%e9%ba%bc%e6%98%afcookie/#comment-16718 我最喜歡這句: [譚膠人應該辭職] 我最喜歡這句: [譚膠人應該辭職]

]]>