PDA

View Full Version : Best Cookie Manager ?


Q Section
November 1st, 2003, 06:02 PM
Hello Everyone

Please respond with your idea of the best cookie manager program. Please only respond if you have tried several and have personal knowledge of them. It will not help if you just say, "My xyz program is so good and I like it and it does what I want." We are looking for a comparison of the better programs to learn to make an educated choice.

Thank you so very much!

LowWaterMark
November 1st, 2003, 06:11 PM
Actually QSection, you may want to qualify the parameters for this question a little more... Your sig line says you are using IE5.5, is that still true? Cookie managers may depend upon browser choice, so full qualification of your conditions will help the responses, I'd think.

For example, if you'd be willing to goto IE6, those people who have tried some third-party cookie managers but ended up selecting the built-in manager in IE6 might be able to compare and contrast the benefits...

Q Section
November 1st, 2003, 10:30 PM
Hello LWM

OK the responses should be those that work with IE 5.5 and /or IE6. We had 5.5, got it corrupted, temporarily went to 6 and just now found and downloaded 5.5SP2. ;D

sig
November 1st, 2003, 11:48 PM
I haven't used a separate cookie manager in years (I use Proxomitron instead which has other functions also). Webwasher also has some cookie management feaures. But two apps specific for cookies I have used were CookieWall, freeware from AnalogX http://www.analogx.com/contents/download/network.htm and CookiePal which has a limited time free trial version and sells for $15 http://www.kburra.com/cpal.html

The info on this site may appear dated, but I think most of these apps are still available if not all: http://www.cookiecentral.com/software.phtml?type=pc

Since various browsers allow for varying amounts of cookie control and cookie managing may be built into other privacy/security apps, there seem to be only a few standalone cookie managers to choose from, if you're looking for just that. I did like CookiePal, though. I'm not sure I can give you a whole lot of reasons why. Ease of use, info available when you want to look at the lists of cookies you are blocking and the ones you have on your system. A nice little app. Is it the best? Perhaps using a combination of a kind of host file block list and browser cookie settings may be the most efficient for some people. It all depends on what you want.

crockett
November 5th, 2003, 04:51 PM
Hello QSection :)

This thread you may be interested in.

http://www.wilderssecurity.com/showthread.php?t=14890

It contains a few links to recent discussions on several cookie managers.

Also contains interesting screenshots by JayK regarding cookie-management.

Rgds, Crockett 8)

Amerk_5
November 6th, 2003, 12:26 AM
I like Cookie Monster (http://www.ampsoft.net/english/Utilities.html#CookieMonster) which is freeware. It only handles the cookies already on your system & it works with many browsers. I use it with Mozilla 1.5, Mozilla Firebird 0.7, & IE 6.

I really like the new feature that can search your bookmarks & favorites, match them to the cookies & then select them all so they can be easily added to your preserved (saved) cookies list with one click. I think this a great feature for first time users who have tons of cookies.

-{ Quote: "This utility is a manager for cookies created by the most usual Windows browsers: Internet Explorer, Mozilla, Netscape and Opera. It also works with any Gecko-based browser and most of the browsers based in Internet Explorer. The program allows you set a list of the cookies you want to preserve and then delete the remaining ones with a simple mouse click. It also have the option of detecting the cookies for the sites included in your favorites and/or bookmarks." }-

spy1
November 6th, 2003, 09:32 AM
Q - Since you're using IE, my hands-down recommendation goes to Cookie Muncher (which can be d/l'ed from here: http://www.webattack.com/get/cookiemunch.html ).

The concept behind Cookie Muncher is quite simple - it "eats" all cookies within a half-second of their arrival, leaving only the "pointer" behind in TIF (which, of course, you should have set to be emptied upon shut-down/re-start).

It allows you to stay logged in anywhere you have to do that - as long as you don't close your browser entirely. IOW, you can leave a page - if you only have one window open - go to another page, then come back and still be logged in.

It also provides the ability to not have the cookies "eaten" by changing their attributes to "read-only", but I don't even bother with that as I have several other programs that automatically kill cookies regardless of what their attributes are (you can safely assume I see no need for cookies that hang around, here).

I really haven't found too many programs that are as beautiful in their simplicity of concept and execution as Cookie Muncher - if you don't want to be bothered with/have to deal with cookies, period, it's the one to get. Pete

notageek
November 6th, 2003, 11:52 PM
If you're using IE6 and want to use a cooking manager, just use the built in cookie manager. just promp for first party cookies and block all 3rd party cookies. :)

You can also use a program like MRU Blaster from Javacool. :) you can find links for MRU Blaster here on this forum (in the Mru Blaster part of the forum).

As someone pointed out there's a good program called cookiewall from Analog x. Theres a link that someone else posted here in this post for cookiewall.

Amerk_5
November 7th, 2003, 02:13 AM
Also, if you're using IE you can use IE-SpyAd (http://www.staff.uiuc.edu/~ehowes/resource.htm) to stop all kinds of bad cookies. You apply the .reg file which adds tons of sites to the Restricted Sites Zone in IE which then prevents those sites from setting cookies.

Q Section
November 7th, 2003, 02:55 AM
Hello notageek

If you have a bit of time you might wish to glance at this (http://www.staff.uiuc.edu/~ehowes/ie6-p3p.htm). It is an article with tests outlining the usage of IE 6.0 cookie managing feature and the lack of full control it allows and how it is spoofed. It is written by the author of IE-SPYAD. BTW - we are already using MRU-Blaster but thank you anyway for mentioning it.

Best wishes

Thank you everyone for your input. We can still take any other opinions anyone wishes to contribute. We will post our choice after a bit.

notageek
November 7th, 2003, 08:57 AM
Thanks QSection. I read that article about IE6 cookie manager. I don't use IE that mush I mainly use Mozilla. But when I do use IE i do use the cookie manager that comes with it. I mainly use IE for this site and a few other forums. :) But give cookiewall a try it's rather good here's the web page http://www.analogx.com/contents/download/network/cookie.htm

meneer
November 7th, 2003, 10:23 AM
As a matter of fact I'm the founder/only member of the CFC, the Cookiewall Fan Club.

Alas, due to overwhelming succes we can't accept anymore members ::)

JayK
November 7th, 2003, 12:42 PM
-{ Quote: " quoting: QSection link=board=20;threadid=15721;start=0#msg99486 date=1068191723]
Hello notageek

If you have a bit of time you might wish to glance at this (http://www.staff.uiuc.edu/~ehowes/ie6-p3p.htm). It is an article with tests outlining the usage of IE 6.0 cookie managing feature and the lack of full control it allows and how it is spoofed.

" }-

I looked it, interesting article showing the interactions between security zone settings, with IE p3p cookie managements/Advanced cookie settings.

It seems though that there isn't anything really wrong with the cookie manager. The article argues that the default settings based on p3p standards are weak, because even doubleclick has privacy policies and hence are accepted under the medium policy.

But if you look at results of "override" and "optin" you can see that users of the "Advanced" cookie options have nothing to worry.

"While the new cookie handling options in IE6 do provide users with a more finely grained means for controlling cookies, the vast majority of IE6 users will find these options much too confusing and involved to be of any real use. Still worse, the default Privacy settings of IE6 are simply too lax for users to expect any meaningful improvement in the protection of their online privacy by IE6 straight "out-of-the-box."

He argues that the settings are too complicated for a beginner and the defaults are bad, NOT that the features are insufficent . For most members on wilders who are willing to study it for a few mins, the cookie manger in IE 6 is more than sufficent.

Still I found this interesting

"1. First-Party Cookies Forced On User

The popup/popunder ads at www.msnbc.com and abcnews.go.com appeared in a new IE window with an address bar. Each contained a new address (other than the primary site being visited). In other words, at msnbc.com and abcnews.go.com there medimum were two first-party sites: one for the main site being visited, and one for the popup/popunder ad. "

It seems strange popups should be considered first party cookies Oh well, that's why we have popup blockers.

Also there is mention of a bug where medium privacy options accepted a cookie when it should not have, but I don't use that settings anyway.

JayK
November 7th, 2003, 12:48 PM
-{ Quote: " quoting: spy1 link=board=20;threadid=15721;start=0#msg99272 date=1068129167]
Q - Since you're using IE, my hands-down recommendation goes to Cookie Muncher (which can be d/l'ed from here: http://www.webattack.com/get/cookiemunch.html ).

The concept behind Cookie Muncher is quite simple - it "eats" all cookies within a half-second of their arrival, leaving only the "pointer" behind in TIF (which, of course, you should have set to be emptied upon shut-down/re-start).

" }-

Wouldn't that be the same as converting them to a session cookie? Or are we talking about something different?

spy1
November 8th, 2003, 11:53 AM
JayK - No, I don't consider it to be the same.

A "per session" cookie is still there on your HD during the length of the session - with CM, it's not - only the TIF "pointer" is.

During the session (with CM running) you have the advantage of not having to log in over and over, you still get all the features that useful cookies provide (letting you see current posts and whatnot) - but you don't have the concern of wondering what those cookies would actually have the capability of doing if they were actually present on your HD (or what other cookies or malware could glean from them if they got on your system).

The major dis-advantage of all the other programs I'm seeing mentioned here for coookie-control is that you have to make decisions about each and every cookie that you come across.

For me, I can see absolutely no real value to having cookies on my HD to begin with - I can see possible dangers from having them there (supercookies of various types are out there, and there are many good tools to examine them with).

I don't want to have to take the time to make decisions about each one (not even once).

I don't need them, they're not necessary, some of them are a possible danger and I haven't experienced any kind of problem by not having them - CM removes all concern.

Cookies simply aren't an issue here, either time-wise or security-wise.

That's just from my point of view, though. Pete

JayK
November 8th, 2003, 12:27 PM
-{ Quote: " quoting: spy1 link=board=20;threadid=15721;start=0#msg99766 date=1068310394]
JayK - No, I don't consider it to be the same.

A "per session" cookie is still there on your HD during the length of the session - with CM, it's not - only the TIF "pointer" is.

" }-

2 comments here, one technical, one practical.

TECHNICAL

I'm not certain, but I have read that session cookies are not saved on the hard-disk but merely kept in memory. The pointers are in the TIF.

Here's a example

"Per-session cookies are stored in memory and are only available during an active session, in other words, while you are on the Web site. Per-session cookies do not permanently record data and are not stored on your computer's hard drive. Per-session cookies do not give the Web site access to anything else on your system, including any private information about you. Only the Web site that placed the cookie can retrieve it. Unlike persistent cookies, which are stored on your hard drive for a length of time set by the Web site, per-session cookies are cached (stored in memory) while you are visiting the Web site and are deleted from your cache when you leave the Web site. If we did not use per-session cookies, moving around on the Web site would be a much slower process."

Other sites refer more specificly to "cookies with no expiration date" as per session cookies. You can google up more references with "cookie is stored in memory only". Am I hopeless confused? Please clarify if what Cookiemuncher does is the same as a per session cookie.

Makes me wonder what browsers like Mozilla do, when they convert cookies to session...

PRACTICAL

Assuming that we have 2 classes of cookies

1) Real session cookies - cookies with no expiration date and hence are only kept in memory and

2) "Fake" session cookies - cookies merely set to expire today, and more importantly are kept on the hard-disk,

What are the difference between the 2 cookies? Information stored on the cookies in memory is still readable by the server isnt it?

spy1
November 8th, 2003, 12:51 PM
If my take on where/how per session cookies are stored is wrong, my apologies. It should be easy enough to check - if you're allowing per session cookies only (and they're supposedly not on your HD) then you shouldn't be able to find them - ever - in the actual "Cookies" folder on your computer, wherever that might be. (I know mine never has any in it of any kind).

My point remains - if you're using CM, you don't have to worry about any of this . Pete

JayK
November 8th, 2003, 01:49 PM
-{ Quote: " quoting: spy1 link=board=20;threadid=15721;start=15#msg99776 date=1068313911]
If my take on where/how per session cookies are stored is wrong, my apologies. It should be easy enough to check - " }-

I know, I was hoping you would know the answer, so I wouldn't have to check. I'm lazy that way.

-{ Quote: "
My point remains - if you're using CM, you don't have to worry about any of this . Pete
" }-

If you look at some of the threads about cookie managemet, mozilla and opera have the ability to convert cookies to session only (assuming it works by storing them in memory only ,that's why i was curious), it takes the place of CM .
for non-ie browsers.

spy1
November 8th, 2003, 03:31 PM
JayK - The thread was started as a request as to what was best for someone who was using IE5.5.

I'm trying not to hijack the thread. Pete

JayK
November 8th, 2003, 03:50 PM
-{ Quote: " quoting: spy1 link=board=20;threadid=15721;start=15#msg99816 date=1068323493]
JayK - The thread was started as a request as to what was best for someone who was using IE5.5.

I'm trying not to hijack the thread. Pete
" }-

??? Who said anything about you hijacking the thread? I only brought up mozilla and opera because of the discussion about session cookies and the fact that they had a feature that might be the same as the one in cm.

Anyway some guy already posted links to threads with much more discussion of options, I just thought it might be interesting to discuss exactly what CM does that is special, but never mind forgot I asked.

Q Section
November 9th, 2003, 01:54 AM
Hello again

We use cookies only for the many forums we visit regularly. These cookies as you all are aware allow us to leave a forum and then re-enter without having to re-input the username and password. If it was not for that we would not need cookies to our knowledge. We are temporarily using IE6 and have the cookie control set to:

First party accept
Third party block
Always allow session cookies

We will be looking into the cookie management programs mentioned above. We appreciate all your input very much. Thank you all again.

FluxGFX
November 9th, 2003, 07:48 PM
Since everyone is talking about cookie management here for IE or Opera......

I was wondering around the net to find something similar to CookieWall from analogx but for Mozilla base browsers. I haven't found anything of near or close to CookieWall and was wondering if we had a couple of expert cookie hunters here that could enlighten me.

WinXP Pro SP1
Mozilla Firebird 0.7
---------

bellgamin
November 10th, 2003, 12:32 AM
I have in use two Cookie Managers that work with ALL browsers that I know of...

1) Cookie Pal- Costs $15. Free trial. It's a real-time cookie manager. I've had mine for >5 years, & they still let me upgrade to latest version. It's a very mature & stable program, stringently maintained by its programers.

http://www.kburra.com/cpal.html

2) Cookie Monster- Free. It's an on-demand cookie manager. As is true for ANY on-demand cookie manager, you should shut down your browser when managing cookies. Otherwise, most browsers re-instate cookies almost as fast as you delete them.

http://www.wonder-hosting.com/~ampsoft/

I prefer not to have a bunch of stuff running when I'm surfing, so I mostly use Cookie Monster nowadays.

HTH..........bellgamin

FluxGFX
November 10th, 2003, 12:37 AM
bellgamin,

Thx,
I was actually looking for something like http://www.kburra.com/cpal.html and not On Demand... something live. I'll check that out.

If I like what I see I might just use softice on this piece of software ;D

FluxGFX
November 10th, 2003, 12:49 AM
Irt would appear that Cookie Pal is not able to see Firebird or mozilla..... bummer

notageek
November 10th, 2003, 08:47 AM
fluxGFX, I am also looking for a cookiewall type thing that would work with Mozilla. I haven't found one yet either but if I do I'll post it here. Not in this post though, I'll make a new topic and post it there.

FluxGFX
November 10th, 2003, 11:37 AM
notageek I'll kiss you! ;D

At least I'm not alone, searching for something similar.
Although it is said on the Analogx website that a CookieWall should be compatible with Netscape in a near version ( But that dates back to 2000 ) shsss.......

Quote " CookieWall is currently only compatible with Microsoft Internet Explorer or derived versions (such as NeoPlanet); Netscape support should be available in the near future."

Last updated 08/06/2000

bellgamin
November 11th, 2003, 12:13 AM
-{ Quote: " quoting: FluxGFX link=board=20;threadid=15721;start=15#msg100222 date=1068443390]
Irt would appear that Cookie Pal is not able to see Firebird or mozilla..... bummer
" }-

Hmmm... it works with all my browsers -- IE, Firebird, & K-meleon. As I recall, you get Cookie Pal running then fire up whichever browser &, when that browser receives a cookie [from any source] tell Cookie Pal -- "SEE! That's the one." & CP will thereafter recognize said browser.

The method is explained in CP's help file. Also on the web site. Also, the CP support folks will answer a query.

Don't quickly give up on CP. It is just about THE best cookie manager there is.

Best of British luck to ye..........bellgamin

FluxGFX
November 12th, 2003, 12:33 AM
Bellgamin I email Cpal.

And they confirmed that not everyone can make Cpal work with anything else aside from Internet Explorer and Opera.

They also gave accurate information on how-to set it up but doesnt work for all users. Therefore even trying to use it with IE, Opera, Mozilla, Netscape, Mosaic failed miserably.

bellgamin
November 12th, 2003, 09:51 PM
Ah well, I have learned something. I apologize for having wasted your time.

in sackcloth & ashes.........bellgamin

Q Section
November 20th, 2003, 03:00 PM
Well we have tried CookieWall and found we had to re-enable some forum cookies after repeatedly telling CW to "always accept."

Next to try is Cookie Pal.
We will keep you all posted.

Q Section
December 22nd, 2003, 11:21 AM
Now we have tried Cookie Pal. We had the same problem as Cookie Wall. We have found we had to re-enable some forum cookies after repeatedly telling CP to "always accept."

Next is the intriguing Cookie Muncher as suggested by spy1.

Results to follow.

Q Section
January 2nd, 2004, 10:22 PM
Why does it seem so impossible to accomplish such a simple task? We want NO cookies except for the forums we visit. So far NO program seems to be able to accomplish this. We tried Cookie Pal, Cookie Wall and Cookie Muncher. The only other cookie management tool we are using is the Cookie Blaster plug-in in the MRU-Blaster program and even it does not seem to be able to get it right.

Does anyone have an answer that works? Thank you.

UPDATE - The cookie/forum problem only seems to be here at Wilders. We do not have this problem on other forums. Here we need to log in EVERY time.

UPDATE to the UPDATE - When first clicking on our shortcut in the Links Bar we get the generic index page with "Guest" at the top. Then after going to any page we see "QSection" at the top without having logged in!??! ??? Well all we can say now is everything does what we wanted it to do! ;D We will probably keep using Cookie Muncher as well.

Q Section
January 4th, 2004, 01:48 AM
-{ Quote: " quoting: QSection link=board=20;threadid=15721;start=30#msg115459 date=1073100128]
Well all we can say now is everything does what we wanted it to do!" }-

Well we take it back. We still find we need to log in to Wilders Forums quite often. Anyone got this problem solved?

spy1
January 4th, 2004, 10:50 AM
Q - I used to have a heck of a time staying logged in here, too. I did a number of things (something of which must have worked).

I have
http://.wilderssecurity.com
http://*.wilderssecurity. com
http://www.wilderssecurity.com/index.php and
64.91.255.104
in IE's "Trusted" zone (note that you should not have a checkmark in "Require server verification (https:) for all sites in this zone").

In my firewall (OutPost Pro), in the "Active Content"/"Properties" section, I have added both http://www.wilderssecurity.com/index.php and 64.91.255.104 and allowed those all "Active Content" rights.

When I do have to log in, I always make sure to use the field at the bottom of the page that says "Forever".

And, of course, I have the wilders cookie set to "read-only" in its' "Properties" field so that CookieMuncher won't wipe it out, and I have it listed in the applicable sections of both SBS&D and SpywareStopper so that they won't wipe it or question me about it.

Having said all that, I still get the message pretty frequently that - well, see the screenshot. Clicking "Re-try" gives me
http://www.wilderssecurity.com/index.php?board=;action=login2 , which pretty well stays put (most of the time! <g> ).

I think the only thing I did to finally work around it was to make sure to always use the "Wilders Security Forums" (top of the folder tree one) to navigate in the Forums until, after two or three clicks to different ones, everything finally locked in - using the "Back" button before then would generally kick me back to square one.

I have no real idea why it does this - but I can tell you that it doesn't do it in either of my other browsers (Opera and FireBird).

Doubt if any of this will help - just thought I'd throw it in here. Pete

yokenny
January 4th, 2004, 12:27 PM
I don't have a problem staying logged in here.

I use CookieCop V2.2 and WinPatrol.
I permitted *.wilderssecurity.com cookies in CookieCop and have http://www.wilderssecurity.com in my Trusted Zone. In WinPatrol I have the wilderssecurity cookies checked to not delete.

I did have a problem staying logged in at TomCoyote and SWI but I deleted the Favorites then added them back and have not had a problem since.

dom424
January 7th, 2004, 07:47 PM
I used Proxomitron for a long time and loved it. After ZAP got good with the privacy I just used it. Now on my XP machine I am using IEClean and really like it. Took me a while to figure out how to use it. It works really well and does a whole lot more than take care of cookies.

Q Section
March 1st, 2004, 11:50 PM
Currently using MRU-Blaster with integrated Cookie Blaster turned off. Also using Cookie Muncher. Still must relog onto forums after each boot-up. We have more to try.

spy1
March 2nd, 2004, 10:08 AM
If you're simply referring to this forum, changing cookie-handlers isn't going to solve the problem.

What you need to change is the browser that you utilize to something else. Pete

Nick
March 3rd, 2004, 02:12 AM
It's been a long time since I've been able to stay logged on here at Wilder's. By that I mean leaving the site by not logging off and returning several hours later or the next day. Doesn't matter what browser , whether IE, Mozilla or Firebird/Firefox. Doesn't bother me, since I only need to log on again and all is well.

I've removed Wilder's from Firefox's cookie handling, so I will get an alert for every cookie from here. I'll keep and eye on them. Perhaps the log log in cookies are session only cookies?

controler
March 3rd, 2004, 07:39 AM
I use firefox also and have it set for current session cookies only and I have to re log in after closing the browser, which means yes they do store a cookie. You can however specify which sites are always or never allowed to use cookies in the exceptions tab.
then there is a tab for stored cookies which has the tick box , Don't llow sites that set removed cookie to set future cookies.