August 12, 2009

Sometimes The Cookie Doesn't Crumble

RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
back to blog index

Ever heard of Flash cookies? They're often used to track your activity. And sometimes even if you delete them they reappear, complete with session state data preserved.

According to a new whitepaper by researchers at the University of California, "We find that more than 50% of the sites in our sample are using Flash cookies to store information about the user. Some are using it to “respawn” or re-instantiate HTTP cookies deleted by the user. Flash cookies often share the same values as HTTP cookies, and are even used on government websites to assign unique values to users. Privacy policies rarely disclose the presence of Flash cookies, and user controls for effectuating privacy preferences are lacking."

To arrive at their results the researchers analyzed "HTTP and Flash cookies from the top 100 domains ranked by QuantCast results of July 1, 2009" and gathered their results on July 27.

You can (and should!) read the full report by downloading the PDF file.

End of Article



Windows IT Pro Community
Blogs






Search Security Matters
 
Security Matters
NOVEMBER 2009
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30      
or

 Recently in Security Matters
Wordpress 2.8.4 Fixes A Big Security Hole
Make a Comment
Microsoft Releases 5 Critical Patches
Make a Comment
How To Help Secure HTTP Data Without SSL

Last Comment
The article has very less information. Need some elaboration....
(1 Comments)
Sometimes The Cookie Doesn't Crumble
Make a Comment
SecureTweets for Twitter
Make a Comment

More blogs about technology,
software, and Windows.

SQL Server Magazine Office & SharePoint Pro DevProConnections asp.netPRO ITTV
IT Library Technology Resource Directory Connected Home Windows SuperSite
 
 Windows IT Pro is a Division of Penton Media Inc.
 © 2009 Penton Media, Inc.     Terms of Use | Privacy Statement