Hacker News new | ask | show | jobs
by paxys 1662 days ago
All they can see is that a user on slack.com is requesting the GIF. If you are using the Slack desktop app there's no other session to correlate it to.
1 comments

The IP address and user-agent is enough of a session over time (remember that it loads every time you open your client as long as the GIF is in your recent history, so you get multiple data points to refine your search). Cookies or browser-specific state is on its way out anyway as more and more browsers impose restrictions.