• haiOP
      link
      fedilink
      English
      arrow-up
      17
      arrow-down
      3
      ·
      1 year ago

      Fair point, I made the meme to be silly, and, yes, this is one of the many reasons why tokens in general should expire after some point in time.

      Also the meme isn’t wrong, memes don’t need logic, they’re supposed to give people a giggle.

        • haiOP
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          3
          ·
          1 year ago

          To be Frank, who I am not (I’m Hai), I can’t tell if you’re a troll or not. Although, if you’re not, my meme is not “wrong” or spreading misinformation it contains a logical fallacy, as many jokes do. I can list jokes that contain logical fallacies upon request.

            • haiOP
              link
              fedilink
              English
              arrow-up
              2
              ·
              1 year ago

              This was the funniest thing I read all day, thank you. Sorry for misunderstanding your tone.

    • NightAuthor@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      1 year ago

      Look at this guy over here, nerding out about the WiFi.

      Jk, glad to find someone in the comments correcting the misinformation in the meme. OP is probably a hacker who likes to do session hijacking.

      • haiOP
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        Not a hacker, just a silly goofball.

    • redcalcium@lemmy.institute
      link
      fedilink
      arrow-up
      5
      ·
      1 year ago

      JWT sounds great on paper until you have to deal with logout and revocations. Might as well use standard session cookies.

    • 4am@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Yeah you really should do both. Some session cookies can just be used as tracking cookies later.

  • mle@feddit.de
    link
    fedilink
    arrow-up
    33
    ·
    1 year ago

    Automatically clear cookies on browser exit, only whitelist the couple of websites you use regularly.

    Has the added benefit of making tracking cookies fairly (but not completely) useless

      • archchan
        link
        fedilink
        arrow-up
        5
        ·
        1 year ago

        That’s still good practice but first party cookies aren’t exactly trustworthy either. IMO, best to whitelist what you trust and use, permablock what you don’t, and auto-wipe the rest.

          • haiOP
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            Cookies used by the site, third party would be cross origin.

            (I think)

              • 0xD@infosec.pub
                link
                fedilink
                arrow-up
                2
                ·
                1 year ago

                To be precise, first-party and third-party just means whether the cookie set is for the domain you are currently on, or for another one. The latter do not have to be tracking cookies, but are often used as such. You can see the cookies that your browser is storing for a specific site by visiting it and looking at them in the developer tools (Storage or Application tab, depending on browser). Under the “domain” column you can see what domain it is for.

                Furthermore, there you can look at the Local Storage and Session Storage tables which are also often used to store tracking data but are not prevented by cookie deletion.

  • IzzyData
    link
    fedilink
    arrow-up
    12
    arrow-down
    1
    ·
    edit-2
    1 year ago

    Only ever using private windows and then alt F4ing to automatically delete all session data.

    • ShustOne@lemmy.one
      link
      fedilink
      arrow-up
      7
      ·
      1 year ago

      These days you’ll need to clear localStorage, sessionStorage, and localDb to really do this. The rise in tokens means some sites only use those.