MS Cookie Patch

May 19, 2000 4:07 PM

MS Cookie Patch Breaks Some Images - We noticed something odd today. Those of us with IE 5.0 who installed the patch to close the cookie security hole can no longer see many of the images on the Washington Post site. People who installed the patch on IE4 still can; and IE5 users without the patch also can. [More inside thread...]
posted by julen (6 comments total)

We think it's because the Post images that break don't have an extension on them. This isn't uncommon with some content management systems, if I understand it correctly...
posted by julen at 4:08 PM on May 19, 2000

It's not uncommon in general; though few seem to do it, it's called auto-negotiation: you place multiple versions of a file in the directory and link to a version with no extension; the browser and server negotiate to decide which one you get.
posted by baylink at 5:48 PM on May 19, 2000

I noticed this today on my intranet website, and finally figured out what was causing it. Bummer.... I guess I have to alert the intranet webmasters, who are complete morons.
posted by delfuego at 9:37 PM on May 19, 2000

I've downloaded the patch and when I try to install it says I can't because I don't need it (I recently ran the windows update thing). When I visit the cookie viewer it still shows my cookies. Weird. I find this a good reason to avoid using the web for secure transactions.
posted by greyscale at 9:16 AM on May 20, 2000

*I* find it a good reason to use Netscape, but I guess let's not open *that* R-war, shall we?

Anyone using the latest Moz6 beta build?
posted by baylink at 10:36 AM on May 20, 2000

Same here, greyscale: I went to download Internet Explorer 5.01 and it wouldn't install, saying IE didn't need updating. So I live with an about box that says it's 5.00.mumble. Microsoft! Sorry about the French.
posted by dhartung at 3:11 PM on May 20, 2000