[tor-talk] Evercookies / supercookies tracking & No Script whitelisting tracking sites

[Mike Perry]

Thus spake Mike Perry (mikeperry at torproject.org):

> Thus spake Joe Btfsplk (joebtfsplk at gmx.com):
> 
> > How, pray tell, does clicking New Identity remove evercookies from
> > 12 - 15 possible locations?  The cache isn't the only place
> > evercookies can be stored.  How does it remove ANY cookies at all?
> > Does that necessarily clear LSOs, clear different locations HTML5
> > data can be stored - like delete webappstore.sqlite - (even if
> > you've not viewed HTML5 media, the cookies can still be place
> > there), or all other known locations evercookies can be placed (so
> > far)?  I never heard or read that feature when using New Identity.
> > Was I absent that day or were we waiting for just the right time for
> > a big announcement?
> 
> Oh, sorry, you did ask how. Well:
> https://gitweb.torproject.org/torbutton.git/blob/master:/src/chrome/content/torbutton.js#l1387

Here's a better link direct to the comment above the implementation,
which describes it.
https://gitweb.torproject.org/torbutton.git/blob/master:/src/chrome/content/torbutton.js#l1370



-- 
Mike Perry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120514/c4da71c5/attachment.pgp>