Maker Pro
Maker Pro

Cookies etc.,

J

Joerg

Jan 1, 1970
0
JosephKK said:
Who says cookies can't be evil?

http://online.wsj.com/wtk

Just turn'em off. That how it's set up here. Tedious at times because
some electronics companies require cookies but then I can allow on a
case by case basis.

No snooping and tracking here :)
 
J

Joerg

Jan 1, 1970
0
Jim said:
That's what I like about Firefox... trivial to keep the crap out.

The only downside is the non-interactive "allow" process. Site doesn't
load, no error message because the script kiddies assumed everyone has
cookies turned on. Then it's guessing time, type in all sorts of web
site names until one sticks. Ok, at least I have to rarely do it.

Or is there a smarter way?
 
S

Spehro Pefhany

Jan 1, 1970
0
R

Rui Maciel

Jan 1, 1970
0
JosephKK said:
Who says cookies can't be evil?

http://online.wsj.com/wtk

If you find cookies to be scary then I suggest that you inform yourself of a new addition to the
WWW called Web Storage, also known as DOM storage.

Basically, Web Storage is a small SQL data base placed in your own HD that any server you contact
is able to access, add and update any information. So, while cookies consist of a small text
string which can be at least 4096 bytes, web storage consists of a full blown RDBMS per domain
that in practice doesn't have any limit set and is free to be accessed by any web server you
happen to access. According to Mozilla:

<quote Mozilla>
DOM Storage is useful because no good browser-only methods exist for persisting reasonable amounts
of data for any period of time. Browser cookies have limited capacity and provide no support for
organizing persisted data, and other methods (such as Flash Local Storage) require an external
plugin.
</quote>


More on:
http://www.w3.org/TR/webstorage/
http://en.wikipedia.org/wiki/Web_Storage


Rui Maciel
 
R

Rui Maciel

Jan 1, 1970
0
Michael said:
That's what you think. If a website uses GoogleAnalytics, you are
tracked by the pages you visit, and your IP address.

That's why God made NoScript.


Rui Maciel
 
J

Joerg

Jan 1, 1970
0
Michael said:
That's what you think. If a website uses GoogleAnalytics, you are
tracked by the pages you visit, and your IP address.

.... which changes all the time in my case. Unless I'd leave the modem on
all day, which I don't. So how can they track me?
 
N

Nobody

Jan 1, 1970
0
Is there some assurance that it doesn't report back to head office?

The Google Analytics scripts send information back to Google, which then
provides the website operator with aggregate statistics.

http://www.google.com/analytics/

Regarding:
That company has spying software everywhere on the Web and it all
reports back to head office.

That's certainly not inaccurate. OTOH, it doesn't matter whether you use
Google as your search engine or not; the code is still on the web sites
which you visit.

FWIW, I browse with JavaScript, cookies and Flash all disabled (I don't
mean "blocked", I mean that the options are simply turned off). If people
want to run programs or store data, they can do it on their own computers.
 
N

Nobody

Jan 1, 1970
0
The web site operator has that information regardless of whether they use
Google Analytics and regardless of any privacy extensions in your browser.
You can't view a web page without telling the server which page you want
and where to send it (your IP address).
... which changes all the time in my case. Unless I'd leave the modem on
all day, which I don't. So how can they track me?

Having a dynamic IP address makes it harder to track you, although not
necessarily impossible:

https://panopticlick.eff.org/
 
N

Nobody

Jan 1, 1970
0
If you find cookies to be scary then I suggest that you inform yourself
of a new addition to the WWW called Web Storage, also known as DOM
storage.

In practical terms, the only difference compared to cookies is the
increased size.

DOM storage can only be accessed via JavaScript, which could provide the
same functionality via a combination of cookies and storage on the web
server.

I'd be more concerned about "Flash cookies", as these can't be disabled
through the Firefox options dialog; you have to use a Flash applet on
Adobe's site to control local storage.
 
J

Joerg

Jan 1, 1970
0
Nobody said:
The web site operator has that information regardless of whether they use
Google Analytics and regardless of any privacy extensions in your browser.
You can't view a web page without telling the server which page you want
and where to send it (your IP address).


Having a dynamic IP address makes it harder to track you, although not
necessarily impossible:

https://panopticlick.eff.org/

True, but at some point it's like having a lock, a deadbolt, a
Rottweiler and a Shepherd. The effort just becomes too much and the
intruding party choses to move on to easier targets ;-)
 
R

Rich Grise

Jan 1, 1970
0
Who says cookies can't be evil?

http://online.wsj.com/wtk

Ah, heck! I was hoping it was like gingerbread men with swords or
something. ;-)

But just browser cookies? That's such a strawman. A cookie is a little
text snippet that the site offers to your browser, which stores it if
you accept it, and (at least when I learned about them) they can only
be retrieved by the site that set them. A COOKIE CAN'T BE EXECUTED!

To protect yourself from malware, just don't do your day-to-day work
as "administrator" - make a restricted user account, and DON'T CLICK
ON UNKNOWN LINKS!

It's not that hard; you just have to pay a little attention.

Cheers!
Rich
 
R

Rui Maciel

Jan 1, 1970
0
Nobody said:
In practical terms, the only difference compared to cookies is the
increased size.

DOM storage can only be accessed via JavaScript, which could provide the
same functionality via a combination of cookies and storage on the web
server.

Claiming that the Web Storage database "can only be accessed via JavaScript" can be misinterpreted
as this technology being completely harmless and only used under very specific circumstances. As
every browser offers a JavaScript implementation and some sites even force the user to enable
JavaScript to be able to access their site, claiming that the Web Storage database "can only be
accessed via JavaScript" is essentially the same as claiming that it can only be accessed through
every browser in the world.

From that, once we realize that there are companies that collect information on essentially all
WWW users by injecting their own JavaScript code on all the sites they can manage to access (and
as a consequence are able to collect piles on information such as browsing history and personal
profiles), providing a juicy RDBMS for them to store and retrieve information from our very own
hard drives is something which should trouble some people.

I'd be more concerned about "Flash cookies", as these can't be disabled
through the Firefox options dialog; you have to use a Flash applet on
Adobe's site to control local storage.

Yes, that's true. Nonetheless, Flash is essentially a gimmick which is essentially losing (if it
hasn't already lost) it's relevance in the web while cookies and this Web Storage thingie is based
on basic WWW standards, it's present in all major browsers and is already indissociable from the
web. To put it in other words, while Flash may be on it's way out, cookies and Web Storage are
deeply entrenched in the web and there is essentially no way around them.


Rui Maciel
 
R

Rui Maciel

Jan 1, 1970
0
Nobody said:
The web site operator has that information regardless of whether they use
Google Analytics and regardless of any privacy extensions in your browser.
You can't view a web page without telling the server which page you want
and where to send it (your IP address).

It's true that the web site operator can register IPs and monitor the cookies his site sets. Yet,
what Google Analytics and the sort does is far more insidious and overreaching than that. Google is
able to inject Google Analytics scripts on a vast number of sites, which enable it to not only
register IPs and monitor cookies but also to cross-reference that data with all the data collected
by all the Google Analytics scripts running on a vast number of sites. By doing that, Google is
able to create, build up and maintain a profile on every user which, among other things, includes
your browsing history and your web habits.

So, in essence, being able to say that "user X logged into my site at Y day" is a whole lot
different than "user X has these browsing habits and these personal interests".


Rui Maciel
 
Top