ghio@temp0199.myriad.ml.org (Matthew Ghio) wrote:
It doesn't check the PW or ID at all except the first time you log in. After that it generates a new cookie titled NPLCNYT and that is the only cookie it checks; the PW and ID are not required to be there at all. If you delete the NPLCNYT cookie, it will check the PW/ID and generate a new one. An example cookie is below:
NPLCNYT=AAAALw>AAAAAX9IUUWiPhfALqHZuSh2mUM0yzNOwGRReAAAAAsAAAAAY3lwaGVycHVua3M>
I put this wafer in my junkbuster-configfile and disabled all other cookies, and NYTimes let me in without asking for a password, but after I read a few articles, the site started behaving strangely, where the server would seem to hang on certain pages, taking forever to send the html. Interesting though. Maybe we should hold a cypherpunks 'potluck' where everyone trades cookies. :)