---
title: "How a Memory Hack From 1994 Built the Walls Web Agents Hit Today"
canonical: "https://current.tinyfish.ai/issue/28/echoes/article/15078/how-a-memory-hack-from-1994-built-the"
publication: "TinyFish"
publisher: "TinyFish"
language: "en-US"
guide: "https://current.tinyfish.ai/llms.txt"
issue: 28
section: "echoes"
section_name: "Echoes"
published: 2026-05-07
word_count: 108
source_links: 0
---

# How a Memory Hack From 1994 Built the Walls Web Agents Hit Today

*May 7, 2026*

[Read on the website](<https://current.tinyfish.ai/issue/28/echoes/article/15078/how-a-memory-hack-from-1994-built-the>)

HTTP was stateless. Cookies faked statefulness, and the fake immediately leaked: any page could piggyback on another site's authenticated session. So Netscape Navigator 2 introduced the origin. Scheme, host, port. The W3C's 2011 security model acknowledged the concept was "born" from this need, not designed as a security primitive. RFC 6454 describes what followed as convergence, not architecture.

The origin locked things down. Too well. Legitimate cross-domain calls broke, so CORS spent a decade carefully re-permitting what SOP had blocked. One identity fiction required a security fiction to contain it. Web agents now navigate both fictions daily, hitting walls built for a threat model that never imagined them.

## More

- [Echoes — Issue 28](<https://current.tinyfish.ai/issue/28/echoes/markdown>)
- [Issue 28](<https://current.tinyfish.ai/issue/28/markdown>)
- [Publication guide](<https://current.tinyfish.ai/llms.txt>)