Hacker News Reader

You get to set the domain when setting cookies so its not a huge issue either way.

Usually, but some browsers won't accept forged cookies. It'll only accept cookies from the domain it requested from.