Tagged Questions
3
votes
1answer
530 views
What is the BCSI-CS-**** cookie for?
I'm undertaking an audit of the cookies we use on our external sites.
There's one cookie that's used by all the sites, and by different domains within the sites. It starts BCSI-CS- and has random ...
3
votes
5answers
253 views
Variable IPs: How variable are they? Best practices for tracking
There are a lot of questions on StackOverflow relating to session security / session hijacking, but there doesn't seem to be a really good solution to the problem. The three most common suggestions ...
7
votes
2answers
2k views
How to use cookies in a secure manner to authenticate users?
In most cases I like using cookies to remember returning users to my websites.
In my early/foolish days, I would store a UserID (auto-increment integer) in a cookie and if the user returned I would ...
