On Sat, Jul 05, 2003 at 02:15:33AM -0400, Nick Tarleton wrote: > I don't think Toesland's stupid and he's obviously working his ass off for > this thing but that's pretty stupid(he's actually blaming a web browser for > shitty Freenet behavior!), Freenet should be made to work with *no browser > cache* that's a pretty fucking basic concept for software made to run in > hostile environments. Don't all browsers support in-memory caching these days?
> cookie*, actually not just a cookie but nice fucking known static So disable cookies and set the default mode in your conf/ini. It's true there are plenty of cookie reading exploits for browsers, but there are plenty of everything exploits for browsers, and the only thing the cookie could reveal is that you have at some time used freenet. > requesting)():freenet:[EMAIL PROTECTED]/colours/3914f3//active.png Horrible, horrible bug. Please kill this immediately matthew. > This is not something that just occured to me, the Internet Explorer thing has > always pissed me off as a Freenet user. They have consistently been pretty > non-chalant about plugging Freenet security holes, but this cookie and log non-chalant? I think they've been plenty "chalant", I don't know what IE thing he's talking about but IE is a lost cause, anonymity-wise. -- Frank v Waveren Fingerprint: 21A7 C7F3 [EMAIL PROTECTED]|stack.nl|chello.nl] ICQ#10074100 1FF3 47FF 545C CB53 Public key: hkp://wwwkeys.pgp.net/[EMAIL PROTECTED] 7BD9 09C0 3AC1 6DF2 _______________________________________________ devl mailing list [EMAIL PROTECTED] http://hawk.freenetproject.org:8080/cgi-bin/mailman/listinfo/devl
