Hacker News new | past | comments | ask | show | jobs | submit login

I haven't logged into Scribd in a while, but strangely when I accessed their website now, it shows me logged-in as some other user. I can see the profile, and all uploaded documents of that user.

Looks like a major security (cookie mixup) flaw!




Ashutosh, please contact me about this so I can investigate - jared @ scribd.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: