ext_5965: (Default)
posted by [identity profile] palfrey.livejournal.com at 06:23am on 12/06/2004
Not actually sure if that's actually possible, given as I've got a fair idea about how to make something like this auto-poster work, and I don't think any decent browser (i.e. I wouldn't trust IE, but then I never do) would give them enough info for the password. The only details are in cookies, and they only get handed out at most to things in the same subdomain - so if this was at a *.livejournal.com address, then maybe it could do that.

However, paranoia being a good habit, and absence of proof is not proof of absence, so I've changed my password anyways.
 
posted by [identity profile] samj.livejournal.com at 06:55am on 15/06/2004
I don't think it is or could be a password harvester either. Had a look at how it works (or did work, the script behind it has been taken away now). Found some relevant info in these places:

http://www.livejournal.com/users/followyourfish/94746.html
http://www.livejournal.com/community/lj_dev/641972.html
http://www.livejournal.com/community/lj_dev/642197.html

February

SunMonTueWedThuFriSat
1
 
2
 
3
 
4
 
5
 
6
 
7
 
8
 
9
 
10
 
11
 
12
 
13
 
14
 
15
 
16
 
17
 
18
 
19
 
20
 
21
 
22 23
 
24
 
25
 
26
 
27
 
28