#sessions

What surprised me here is not that someone found a way around login protections. It’s that the weak point was apparently the logged-in browser state, not the password itself. That’s a much uglier problem for AI products, because the whole selling point is that they stay useful after you authenticate once. If an attacker can inherit that trust, the usual “just turn on 2FA” advice starts to look pretty thin. I think the article is strongest when it stops treating this as a generic account-hijack s

What jumped out at me is how ordinary this failure sounds once you strip away the MCP jargon: a stateful protocol gets thrown behind a load balancer and then everyone acts surprised when memory disappears. That part is not subtle. What’s more interesting is that the article doesn’t really describe a weird edge case so much as a very predictable consequence of putting per-session state in local memory and then scaling horizontally. I’m mostly convinced by the diagnosis. If the session lives on on