Thursday, February 17, 2011

A new security threat arrives: "Evercookies"

Reader Rome Arnold was alarmed to learn of a new kind of cookie.
  • "Is it correct that private browsing does not block the placement of Evercookies (or permanent cookies) on your computer, no matter whether you are using Firefox, Chrome, IE, or Safari?

    "From what I read on the Net, these Evercookies are very difficult to clean because they are placed in multiple locations and can self-regenerate."

Evercookies are indeed real: The author of the Samy worm invented and released a new tool for creating permanent cookies that evade classic cookie-management tools.

Evercookies hide themselves in eight different places, and they can regenerate themselves if you delete them....

That's the start of my current Q&A columns published in this week's Windows Secrets. I discuss what Evercookies are, how they're created, what they do, and how to block and remove them. I also discuss "Local Shared Objects" and similar cookie-like data-storage mechanisms that can also evade basic cookie-management tools.

Other reader-submitted questions answered this week:

  • Coping with generic error messages
  • Solved: System Restore disk creation failure
  • Password managers need strong passwords
Here's the full issue run-down:

The following link includes all articles this week: http://WindowsSecrets.com/comp/110217

Free content posted on Feb. 17, 2011:

 
Paid content:

A portion of your support helps children in developing countries
Each month, we send a full year of sponsorship to a different child. Your contributions in January are helping us to sponsor Keith, a twelve-year-old boy from Zambia. Children International channels development aid from donors to Keith and his community. We also sponsor kids through Save the Children. More info

Posted via email from Fred's posterous

No comments:

Post a Comment