LWN.net Logo

Cryptographic splicing makes for a Wordpress vulnerability

Cryptographic splicing makes for a Wordpress vulnerability

Posted May 8, 2008 21:18 UTC (Thu) by martinfick (subscriber, #4455)
In reply to: Cryptographic splicing makes for a Wordpress vulnerability by bronson
Parent article: Cryptographic splicing makes for a Wordpress vulnerability

Can you name a browser implementation that does work?

Yes, konqueror. It stores this info in the kde wallet system, the wallet system will allow you to remove entries from it.


(Log in to post comments)

Cryptographic splicing makes for a Wordpress vulnerability

Posted May 9, 2008 3:01 UTC (Fri) by bronson (subscriber, #4806) [Link]

That just forgets your password, right?  It doesn't actually allow you to log out.

Cryptographic splicing makes for a Wordpress vulnerability

Posted May 9, 2008 4:19 UTC (Fri) by evanp (subscriber, #50543) [Link]

Subsequent HTTP requests cause your browser to prompt you to login, so yes, you are indeed
"logged out" in that sense. The server isn't notified, though, which might be what you were
asking about.

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds