Live data from Hacker News

Evercookie: A cookie that undeletes itself from 8 different storages

samy.pl

31–40 of 114 posts

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#31
Seems like this will be pretty effective even if widely known, since clearing one of these 'cookies' will require deleting a lot of info, including some you were probably using.

You'll be simultaneously clearing history and cache, logging yourself out of every site you're logged into, clearing all offline state in every web app you use, etc. Most people won't want to do that often.

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#32
post #24

I feel sick after reading this. Would a browser extension be able to clear everything?

Flash Cookies: I imagine that if he can create them, then you can remove them, though I'm doubtful that extensions have full access to Flash internals. HTML5 Storage: I'm not an expert on the different types of HTML5 storage, though since this is at the browser-level, I imagine the it would be easy for an extension to access them. Regular Cookies: Obviously extensions have access to these. Force-Cached PNGs: Not sure…

> Flash Cookies

Firefox has the BetterPrivacy extension. https://addons.mozilla.org/en-US/firefox/addon/6623/

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#35
I know that in Chrome's incognito mode, nothing gets written to the disk at all (including Flash's Shared Objects). So if I open an incognito window, browse, then close Chrome, then open another incognito window and return to the page, does this defeat all this?

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#36
post #15

Earlier quoted context omitted.

Also now that it's packed up so tidily, we'll probably get some better tools for blocking/removing all of those tricks. Think of it like an Acid3 test for browser security.

That's a good perspective. It's my fervent hope someone names their tool everenema.

[deleted]

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#39
post #15

Earlier quoted context omitted.

Important point. Better to let everyone see the truth of evercookie than let the bad guys enjoy it in the dark. Still, with it all packed up so tidily, a few rascals will do something interesting with it.

Also now that it's packed up so tidily, we'll probably get some better tools for blocking/removing all of those tricks. Think of it like an Acid3 test for browser security.

Isn't it trivial to change his script to remove the cookies? I should have a look into that.

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#40
post #34
post #29

So by default, I should be browsing every site in Incognito/private browsing mode, then.

Will that defeat Flash storage and the PNG caching trick, too?

It doesn't look like it. Neither will clearing your private data (I tried).
Post reply on HN