From: nobody@REPLAY.COM (Anonymous)
Date: Mon, 26 Jan 1998 04:08:48 +0800
To: cypherpunks@cyberpass.net
Subject: Re: NYTimes web cookies
In-Reply-To: <199801251852.NAA20393@myriad>
Message-ID: <199801252000.VAA04977@basement.replay.com>
MIME-Version: 1.0
Content-Type: text/plain



ghio@temp0199.myriad.ml.org (Matthew Ghio) wrote:

> It doesn't check the PW or ID at all except the first time you log in.
> After that it generates a new cookie titled NPLCNYT and that is the only
> cookie it checks; the PW and ID are not required to be there at all.
> If you delete the NPLCNYT cookie, it will check the PW/ID and generate
> a new one.  An example cookie is below:
> 
> NPLCNYT=AAAALw>AAAAAX9IUUWiPhfALqHZuSh2mUM0yzNOwGRReAAAAAsAAAAAY3lwaGVycHVua3M>

I put this wafer in my junkbuster-configfile and disabled all other cookies,
and NYTimes let me in without asking for a password, but after I read a few
articles, the site started behaving strangely, where the server would seem
to hang on certain pages, taking forever to send the html.

Interesting though.  Maybe we should hold a cypherpunks 'potluck' where
everyone trades cookies.  :)