Session Hijacking in 1999: What A URL Bug Taught Me About Trust Models
Or: Finding Security Holes The Hard Way Before We Called Them That Act 1: The Takeover In mid-1999, I took over an e-commerce business from a friend. He’d bought a bunch of inventory (crash pads and other gear for bouldering) and then got busy with his actual professional job. The pads were sitting in his…