Other nomination
How to use Google Analytics to DoS a client from some website.
Oversized cookies push a request past Apache's header-size limit, so a victim gets HTTP 400 and is locked out of a site. Google Analytics is abused to plant them: a host named google.* fools its organic-referer detection into storing a long search term, and a #gaso= fragment sets a second cookie, together exceeding the per-cookie limit.
Record
- Researcher
- sirdarckcat
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of sirdarckcat, first published at the original source. Preserved copies are kept so the citation survives its host.