Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Its sometimes annoying (having to type in login credentials etc.) but I use Firefox with Self Destructing Cookie addon. It seems to control this problem quite well (at least I think it does). I whitelist sites I want to keep cookies for but basically everything else is destroyed as soon as the tab closes.

Someone please correct me if I'm wrong that this addon deletes this kind of cookie / localstorage.

Firefox is kinda good at storing passwords so I don't have to retype all my logins which removes most of the annoyance.



It would stop some tracking, but the people doing the tracking have many clever (and some not so clever as sometimes the simplest things just work!) ways to fingerprint you beyond cookie values. See things like https://en.wikipedia.org/wiki/Evercookie for an example of how much trouble you really need to go to in order to try avoid being tracked.

I keep toying with the idea of writing an add-on that doesn't just destroy tracking cookies (well, any non-white-listed cookies) but instead shares them around randomly - so next time you visit a site you might have the cookie from last time I did, or someone the other side of the world... That would also not affect anyone using mixed techniques like Evercookie (the discrepancy between what each state store has recorded could be seen and used to throw out the data instead if letting it pollute the tracking pool). Of course care would need to be taken here: if you share cookies from sites that take authentication you could open up session hijacking vulnerabilities. Only storing/sharing cookies from HTTP sites might help (no site requiring authentication should be running through un-Sed HTTP) but wouldn't be a perfect solution.


With the current state of affairs I think that poisoning the well is a better tactic than trying to prevent being tracked.


I do too, unfortunately with the new cookie law in place this means I get even more banners than those who openly allow cookies...


The people that wrote the EU cookie law should be forced to use a browser that deletes cookies when it closes. That way the pointlessness of the law should become obvious to them.

When my co-workers and I read the first version of the Danish version, we read two different things. I'm sure I read the law as it was intended, and the others found all the loop holes.

The sheer amount of tracking stuff injected into some sites are ridicules, 5, 8 15 or more different ad, tracking and retargeting services and all they have to do is say "Hey, we use cookies". That great, I bet you can tell me what half of them does or where they come from. Because that's another issue, you sign up for "sales tracking" with one company and you add their Javascript snippet AND BOOM, they side load three other services.

The sad part is that users don't even get better service, they just get more ads.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: