CATCHING COMPROMISED COOKIES

Summary from the TLDR Web Dev newsletter

Slack detects session forking through the use of last access timestamps, IP addresses, and a two-phased cookie update approach. Session forking is when a cookie is being used from more than one device at the same time. Slack's system helps identify and mitigate the risks associated with stolen cookies while reducing false positives and minimizing performance impact.