Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Evercookie: A cookie that undeletes itself from 8 different storages

samy.pl

Post reply on HN
Print view View original

61–70 of 114 posts

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#62

Post by dageroth »

redemade wrote: post #19

check out http://www.convertro.com/visitor-tracking.html . looks like the analytics guys are already using similar sketchy methods.

Well, it does not say anything about the methods they are using... cross machine tracking definitely seems somewhat strange and unexplainable to me...

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#63

Post by sireat »

naturalized wrote: post #35

I know that in Chrome's incognito mode, nothing gets written to the disk at all (including Flash's Shared Objects). So if I open an incognito window, browse, then close Chrome, then open another incognito window and return to the page, does this defeat all this?

I have gotten Flash Objects before, while using Chrome incognito mode.

Will have to repeat this experiment with the current version.

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#65

Post by mike-cardwell »

mike-cardwell wrote: post #64

Firefox's BetterPrivacy addon defeats all of these techniques. I just tested and confirmed this myself.

I also have Firefox clearing all cookies and all history on exit so that probably helped during my testing. BetterPrivacy dealt with the lso stuff though.

I don't know why people allow cookies to persist between browser sessions. I've been clearing them on exit for years now and it really doesn't make it more difficult to use the Web.

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#66

Post by mike-cardwell »

ck2 wrote: post #50

In firefox set about:config -> dom.storage.enabled -> false Use flashblock and also block cookies by default. The above causes evercookie to fail for me. No need to block javascript.

Personally, I prefer to allow websites to use those things, but to then clear them between browser sessions. Just use the Firefox BetterPrivacy addon.

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#68

Post by henrikschroder »

barrybe wrote: post #15
danilocampos wrote: post #11

Earlier quoted context omitted.

Important point. Better to let everyone see the truth of evercookie than let the bad guys enjoy it in the dark. Still, with it all packed up so tidily, a few rascals will do something interesting with it.

Also now that it's packed up so tidily, we'll probably get some better tools for blocking/removing all of those tricks. Think of it like an Acid3 test for browser security.

Putting IE in private browsing mode defeats it btw, so it's definitely doable.

Re: Evercookie: A cookie that undeletes itself from 8 different storages

#69

Post by henrikschroder »

henrikschroder wrote: post #68
barrybe wrote: post #15

Earlier quoted context omitted.

Also now that it's packed up so tidily, we'll probably get some better tools for blocking/removing all of those tricks. Think of it like an Acid3 test for browser security.

Putting IE in private browsing mode defeats it btw, so it's definitely doable.

Oh wow, putting Firefox in private browsing mode did not defeat it. That'll probably get fixed pretty quickly, I hope.
Post reply on HN