Hacker News new | ask | show | jobs
by martinko 4153 days ago
Hm, now the link in the article (www.discoverpresentsonline.com/david-brain/report.html) just redirects to the real discover magazine.
2 comments

In the article it mentions it only lets you see the article if you have the tracking cookie from the ad
That part made me scratch my head a bit, because they shouldn't have access to Yahoo cookies.

I think the article meant the http referrer needed to be yahoo?

Possibly. Can you set cookies over JavaScript? Ad networks allow ad providers to inject arbitrary JavaScript into their clients' websites.
You can set and read cookies using Javascript, but due to same-origin policies that are present in all modern browsers, it shouldn't be possible for a non-Yahoo domains to read cookies set by Yahoo.

There might be some exception that I'm not aware of, but that would seem like a pretty serious browser security issue.

I curl -i'd it. It gives a 302 redirect but also serves the content. As in, someone did header("Location: ..."); but forgot to also die();.
If anyone wants to read the page, here's a copy of the page content (images are linked with relative path and thus broken): http://pastebin.com/raw.php?i=7yEUirQf