Tuesday, April 24, 2012

Super Cookies - New Internet Threats

A few new things to be aware of while you are browsing the internet (surfing the NET).


Types of Super Cookies:

  1. Flash LSO’s (Local Stored Objects):  Uses flash code to store tracking info that cannot be removed by browser functions because it is store in the flash plugin and works across multiple browsers
  2. Zombie Cookies:  Placed on websites by individuals with no affiliation, for use in attaching to a visitor to use for tracking and gaining a person’s personal information, even after deleting this cookie it can be recreated and still track you because it also uses flash
  3. Browser Finger Printing:  Identifies users for tracking based on their browser configuration signatures, IP addresses, plug-ins, system fonts, and operating systems
  4. Client-Side scripting:   A website stores information of visitors and stores the information in a database located on their site


New Threats:
ETags:  Are an identifier that a Web server assigns to a specific version of a resource found at a URL. If the content at that URL changes, the Web servers assign it a new ETag.

This lets a system recognize when content hasn't changed between server requests for URL and that the information that browsers have cached is still current. The tags thereby eliminate the need for servers to resend the same information. This makes the process more efficient.

However, the approach also lets online advertisers utilize ETags — which contain information about visitors to sites — as another technique for tracking users.

People who track users via ETags generate unique identifiers that recognize visitors across multiple returns to a given site.

ETags are stored in a browser's cache and aren't eliminated when users delete cookies. Instead, users must manually clear their browser caches to get rid of ETags.

No comments:

Post a Comment