Timeline for Data Explorer (SEDE) Auto-Login that redirects back to original target page
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 2, 2022 at 13:35 | comment | added | user202729 | ... only try to prompt the user when the "log in with SO" button is clicked then it's not already logged in SE. Since the cookie timeout (presumably) is much larger on SE than on data.SE, most of the time clicking the "login with SO" button will be sufficient to login, so the password never needs to be used at all. (in that case just type random strings for the username/password works.) | |
| Jul 2, 2022 at 13:33 | comment | added | user202729 | Okay works, but ■ note that if you enter your username/password, it will be stored in plain text in your Greasemonkey database. Normally only the plugin can access this so you're safe; however some browser (e.g. qutebrowser) stores it in localStorage of the site, so an extremely targeted attack (also requires XSS vulnerability on SO to access localStorage, I think. Not sure if stacksnippets count) might be able to get your password. Be careful. Otherwise they're stored in in hard drive anyway. ■ The "encryption key" is only for obfuscation, not "real encryption". ■ I think the script should... | |
| Jul 6, 2019 at 0:31 | history | edited | Brock Adams | CC BY-SA 4.0 |
added 31 characters in body
|
| Jul 5, 2019 at 23:55 | history | asked | Brock Adams | CC BY-SA 4.0 |