Hacker News new | ask | show | jobs
by shawabawa3 4152 days ago
In the article it mentions it only lets you see the article if you have the tracking cookie from the ad
1 comments

That part made me scratch my head a bit, because they shouldn't have access to Yahoo cookies.

I think the article meant the http referrer needed to be yahoo?

Possibly. Can you set cookies over JavaScript? Ad networks allow ad providers to inject arbitrary JavaScript into their clients' websites.
You can set and read cookies using Javascript, but due to same-origin policies that are present in all modern browsers, it shouldn't be possible for a non-Yahoo domains to read cookies set by Yahoo.

There might be some exception that I'm not aware of, but that would seem like a pretty serious browser security issue.