Six Lines

Indestructible Cookies

Posted by Aaron Massey on 25 Sep 2010.

There’s something inevitable about “evercookies,” which is a javascript API that attempts to create extremely persistent cookies. Bruce Schneier mentioned them two days ago, and they have been covered by Ars Technica as well. I won’t link to the site directly because it creates an evercookie on your system if you visit it, but I will say that most of the methods used to create these cookies come from HTML5 storage mechanisms. I’ve been consistently surprised at how few privacy researchers are looking at the many new ways of storing local data with HTML5. Expect to see more of this sort of thing in the future.