View Full Version : Supercookies - No luck in removing
JVasek
November 3rd, 2002, 04:51 PM
Earlier this year there was some concern raised about supercookies and windows media player. I installed WMP9 recently and checked the various websites to see what id was being given out by my system - running XP Pro SP1.
My system seems to be locked to -
{3300AD50-2C39-46c0-AE0A-000000000000}
I followed the instructions on unchecking unique identifiers - hacking registry keys etc but no matter what I try the system still generates the same id.
I've tried id-blaster-plus but nothing seems to remove or force a change in this 'supercookie' id when you use the tools on various websites that show you the supercookie id. I've searched the registry but this key does not exist.
Does anyone know how to randomise or change this id as it would seem to allow tracking. Of course if everyones id is the same there is no issue.
??? JV
Pieter_Arntz
November 3rd, 2002, 05:15 PM
Hi JV,
I´m not familiar with WMP9, but please have a look at this site (http://www.student.math.uwaterloo.ca/~dajhorn/projects/msmp6ufa/) and tell me if and how WMP9 is different apart from the fact that you will propably find options under Extra instead of View (like in WMP8)
We can´t ask Javacool if he is working on a solution for WMP9 since he´s enjoying a short break.
Regards,
Pieter
JVasek
November 3rd, 2002, 05:59 PM
Pieter
Thanks for the reply - In WMP9 options privacy, you can check/uncheck 'send unique player id'. I have also run with your suggestion on wmp6 and tried all combinations.
WMP9 off WMP6 off, WMP9 on WMP6 off etc
No luck - I'm not that concerned, just perplexed that I can't find what's causing this - WMP may not be the culprit. I'm curious if anyone else can reproduce the same problem ?
It might be something dodgy on my machine, I'm due for a full rebuild/install soon so may monitor closely what happens as I put various bits of software back.
A search of webpages/newsgroups on supercookies, shows very little since the first few months of this year. I thought that maybe I had missed some magic fix/solution to disabling them.
When Javacool returns from his break no doubt he can comment.
JV
snowy
November 3rd, 2002, 06:20 PM
JVasek
sorry to hear you are having that problem. Can't offer you an absolute answer......a couple of suggestions perhaps.....
There is a program called Beta 10 Option Component Maker 1.5 that...(depending on your os) will un-install the new WMP and install version 6.....you can install and re-install at your will..........version 6 uses much less resourses...........also.....WindowsUpdate site may offer you an un-install option......but you will need to locate the former version for re-installation.
I was about to try the version you mention an noticed your post.....I'll pass on it now........
thanks for advising............
snowman
JVasek
November 4th, 2002, 02:28 AM
Snowy
Unfortunately the program is Windows Me only and can be found on beta10 's site called oppcom16.
thanks
JV
Paul Wilders
November 4th, 2002, 02:35 AM
If one's ready to cough up some bucks, IEClean will handle those:
{QUOTE-> IEClean also allows you to control cookies and XML "supercookies" <-QUOTE}
Detailled specs from this PSC proggie (NSClean for Netscape users can be found here (http://www.nsclean.com/iedetail.html).
regards.
paul
Pieter_Arntz
November 4th, 2002, 03:16 AM
I found this (you can try if it helps on WMP9 as well):
WMP7/WMP8 - Open up Regedit and head to HKCU\Software\Microsoft\Windows Media\WMSDK\General. Double-click the 'UniqueID' value and change it to '0' or zero out all numbers. Don't change it to something like ***censorship*** or WMP will generate a new GUID the next time it starts.
Also, you need to turn ON the option 'Allow sites to uniquely identify my player' (or similar, I don't have WMP7) or else MSIE will generate a semi-random GUID every session even if you set the Registry GUID to '0'. Unfortunately it's not random enough to prevent websites from STILL uniquely identifying you. If you turn the option on it will fetch the (editable) GUID from the Registry.
Found that here (http://www.geocities.com/Pentagon/Quarters/5077/new/supercookie.html)
Regards,
Pieter
JVasek
November 5th, 2002, 01:26 AM
Paul and Pieter
Thanks for the additional info - tried the various registry fixes still no luck -
I'm not expert enough to understand how the retrieval of the id is done, the identifier shown by various supercookie sites remains constant and when I search the registry for this id, it cannot be found.
Can I ask if anyone is getting similar constant id's from these test sites ?
I may shell out and try IEClean as I've been using BOClean and am happy with that product.
regards
JV
Paul Wilders
November 5th, 2002, 01:32 AM
On a side note: won't hurt to install this nice little proggie from JavaCool:
http://www.wilderssecurity.com/wmpscriptingfix.html
IEClean does take care of the job - that's for sure.
regards.
paul
luv2bsecure
November 5th, 2002, 08:57 PM
My first post in a few days - utilized the weekend to get some things done concerning my Uncle's estate.
Being away from here breaks me out in hives. :'(
I just wanted to ditto Paul's post about IEClean. It will eliminate those, and that fact alone makes it worth the price of the software in my opinion.
John
Luv2bSecure
vBulletin® Copyright ©2000-2008, Jelsoft Enterprises Ltd.