Hacker News Reader

you put the session id inside the url params :3

But then the session id can leak via referer header :(

He was suppose to give a solution to parent's question, not necessary a secure one.