Could someone explain how e-hentai manages to do cross-domain cookies...

Could someone explain how e-hentai manages to do cross-domain cookies, and if the idiots who can't get past sad panda without an extension have a real leg to stand on when they say their systems have better security? Because I think there's no finer display of the stupidity of the masses than this.
haruhichan.com/forum/showthread.php?25188-Chrome-ExHentai-Easy-v2-Get-past-sad-panda!

#sadpanda rizon

Eh, I'd rather anonymously ask stupid questions about cookies here than there. I'm just interested in how the tech works, without bugging the moderators who are already incredibly busy tagging stuff.

I think part of the point is, it doesn't.

Not sure if there are newer and cooler ways to do this, but traditionally, you had to alter the cookie to point to sadpanda instead of e-hentai, the site you got it from. I think you could do this without installing extensions in older versions of Firefox, but now you need a cookie manipulation extension to do this because Mozilla are faggots.

Basically, if you connect to sadpanda without a sadpanda-owned cookie, you will get the sad panda, but if you alter the e-hentai cookie to point to sadpanda (essentially, changing the ownership), next time you visit the website, sadpanda will be able to retrieve the cookie, as if it was sadpanda who emitted the cookie, and then proceed to log in because both sites share databases. Modern browsers are patched against most cross-domain cookie stealing exploits (XSS and JS injection remains, for example), so this is why you have to go through all this to be able to masturbate to your Singaporean puppets.

There is a second, easier method, that's probably done IP-wise entirely serverside. Instead of getting the sad panda, if you are inside the whitelist, you will get a cookie.

If you are talking about something else or some other method, please explain.

What do you mean by traditionally? I have an account from as far back as 2010, but in all those years of activity I never have had to do anything except login at e-hentai to cross the fjords.

And I have used firefox on pc and safari on the ipad to login for about that long without the trouble of editing cookies or installing extensions I don't know. Yes, it stopped working once or twice, but clearing my cookies and loging in again fixed it. I still want proof that anyone who can't login the way I have, isn't a potato and/or has better security.

Simply put, not many people know about your method. halfchan guides to sadpanda usually mentioned the first "traditional" method alone, so many people learned to do that instead of using the saner method.

I doubt they are braindead, it simply made sense. The only way you may know about sadpanda is if someone else tells you about it, and none of the login methods are straightforward or obvious (afaik, the simpler method only works if you immediately login onto sadpanda, so the IP whitelist may be short-lived), so in a climate of people who believed to be a sikret club, it only made sense to think that a "borderline legal" website was a secret club much more hardcore than their own, with ridiculous access rituals.

It was only after Holla Forums that many people "rediscovered" your method (maybe because you mentioned it once and then it spread), since it seems the preferred method around here. Still, some people seem to have difficulties getting this to work even after being guided step by step for some reason, so it may not work for all accounts or IPs

Or you could just replace the beginning of the link with g.e-hentai and laugh at all the faggots and their sekrit club shit

You log into e-hentai and the cookie gives you access to exhentai. There is no whitelist.

That doesn't work with loli you fucking retard.

Alright, just ran some tests and it doesn't seem to put you on an IP whitelist on login, but it probably does on logging to sadpanda.

Basically, what happens when you connect to sadpanda is that you get redirected to e-hentai, and then you are redirected back to sadpanda, where you are given a cookie. Look it up in your network inspector.

Most of the good shit isn't available on e-h.