Securing your Account PSA

[ValiantWind (Valiant)]

@sanjay2003

grab cookies

@mvvrgan

Two words, cookie grabbing

No longer an issue.

IP Changes Invalidate Cookie

Reproduction Steps Login to a Roblox account Turn on a VPN / use the cookie on a different IP Refresh the page Device Info User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 Platform Type: PC Device Type: Computer Expected Behavior I expect the cookie to be valid, even if my IP changes. I should not be logged out just because I turned on a VPN. My cookie should also not randomly expire 2 years later. …

(Intentional)

@mvvrgan

Two words, cookie grabbing. It should be mentioned anyone suspicious, e.g scammers are getting players to follow a tutorial for them just release a file that includes their cookie for example (.HAR file)