Supercookies

[Ted Smith]

On Thu, 2009-08-20 at 08:55 +0200, Matej Kovacic wrote:
> Hi,
> 
> I am not sure if this was on this list, but it is an interesting
> information:
> 
> http://www.wired.com/epicenter/2009/08/you-deleted-your-cookies-think-again/
> it seems cookies could be "respawned"...
> 
> And there is a plugin to remove this LSO's:
> https://addons.mozilla.org/en-US/firefox/addon/6623
> 
> You need to set Flash directory (autodetection does not always work):
> - Windows: %APPDATA%\Macromedia\Flash Player\
> - Macintosh: ~/Library/Preferences/Macromedia/Flash Player/
> - Linux/Unix: ~/.macromedia/Flash_Player/
> 
> Maybe something like that should be integraded into TorButton...
> However, the question is what about Silverlight and other non-flash
> plugins...
> 
> There is also a Windows tool called CCleaner (http://www.ccleaner.com/)...
> 
> bye, Matej

The best solution here is not to use non-free software as a general
rule, and stay the f*** away from non-free software peddled by companies
that have their software phone home to "192.168.1.2o7.net". IIRC, Gnash,
the GNU swf decoder/player/interpreter/whatever, does not have these
flash cookies, and if it did, you could easily disable or find a way to
purge them. 

Really, though, a Torified browser should have as few plugins as
possible, to limit anonymity attacks and the general surface area for
other exploits.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: This is a digitally signed message part
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20090820/af5e9272/attachment.pgp>