Evercookie
Extremely Persistent Cookies
advance visitor tracking
Websites use several methods to identify a specific user visiting their service, or other third party service to which they are affiliated with. Most common Method is use of standard HTML cookies and Flash cookies, also known as Local Shared Objects.
What is Evercookie ??
Evercookie is used to produse extremely persistent cookies in client's browser. The main purpose of this is to identify a clients even after they have removed standard cookies. For this type of advance identification of user, evercookie stores the cookie data in several types of storage mechanisms availabe on the browser. If evercookie has found that user has removed any of the types of cookie, it recreates them using each mechanism available.
when creating a cookie, it uses the following storage mechanisms when available.
- standard HTTP cookies
- Local shared Objects
- Sliverlight Isolated Storage
- Storing cookies in RGB values of auto generating, force-cached PNG's usiing HTML5 Canvas tag to read pixels (Cookies) back out
- Storing cookies in Web History
- Storing cookies in HTTP ETaqs
- Storing cookies in web cache
- window.name caching
- Internet Explorer userData storage
- HTML5 Session Storage
- HTML5 Local Storage
- HTML5 Global Storage
- HTML5 Database Storage via SQLite
Evercookies introduce a new level of user tracking. The website will be able to track it's user, and reproduce deleted cookies, if at least one cookie or data in storage locations is not deleted by the user. And we can assume it's impossible to delete all cookies from all these locations because most of the user do not know about these type of storage of cookies.
what can you do to protect your system from this new kind of user tracking?
- Add-ons like NoScript prevent the creation of several of the cookies.
- Private browsing modes are an option as well.
Posted BY: H[4]ck3r
source: Ethical hacking
0 Visitor Reactions & Comments:
Post a Comment