Show Me Your Cookie And I Will Tell You Who You Are

http://arxiv.org/PS_cache/arxiv/pdf/1108/1108.5864v1.pdf

 

So this only affects logged-in Google users? I've already disabled my Web Search History a long time ago.

 

I've always suspected one of the driving forces for google+ was to keep people logged in while they browse and search the internet.

 

This is not a Google-only attack. It's a proof of concept using Google to show that cookies can be used to access personal data.

 

Now if only blocking all cookies wouldn't screw up a good percentage of the web.

 

Had it for a while:



Works fine for my needs, maybe not others.

 

Ahh, but I'm saying cookies in general, as they can all be used in this way.

 

Err, no. Only tracking cookies that collect this kind of information in the first place. Google may not be the only one, true. But the information needs to be stored in the cookie. What exactly could you steal from a Wilders (or any forum) cookie?

 

Probably not much from Wilders, admittedly.

 

It's not about the info stored on the cookie, it's about using the cookie to get to the info. For something like Google this is a bit of an issue - for Wilders? Not so much.