Cookies are bad for you: Improving web application security (2011) | Hacker News Reader