google cookie

Karsten N. tor-admin at privacyfoundation.de
Wed Jun 3 10:02:33 UTC 2009


Hi,

I have a question about google cookies and tor hidden services.

I use a Firefox with a separate profile for tor (Iceweasel Debian
5.0/lenny). I have installed the add-ons TorButton 1.2.1, CookieSafe
and RefControl from the Mozilla website.
Update of add-ons and search plug-ins is disabled.

On normal startup Tor is activated and never disabled. And I use this
firefox profile only for access tor hidden services.

And I got cookies from google.com!

Is it possible? I can not believe it. It is not a problem for me, I
can disable cookies. But it is interesting.

I checked it with two tor hidden services. I am sure, the hidden
services do not send a cookie and do not cooperate with google.com.
The cookies were not send at the index page, they were placed at the
2-3 access the hidden service.

site:  http://a5ec6f6zcxtudtch.onion/

cookie:

  name: PREF
  value:
ID=689e4d6d5e36a136:TM=1244020340:LM=1244020340:S=eqC05F5sxOcAqVam
  domain: .google.com
  path: /
  secure: not


site:  http://c4wcxidkfhvmzhw6.onion/

cookie:

  name: PREF
  value:
ID=71982272f824572a:TM=1244020772:LM=1244020772:S=oer4Z9PZ4yGhGcxs
  domain: .google.com
  path: /
  secure: not

Any help, how this works?

regards
Karsten N.



More information about the tor-talk mailing list