Evercookie | advance visitor tracking method

Evercookie

Extremely Persistent Cookies

advance visitor tracking

Websites use several methods to identify a specific user visiting their service, or other third party service to which they are affiliated with. Most common Method is use of standard HTML cookies and Flash cookies, also known as Local Shared Objects.

What is Evercookie ??

Evercookie is used to produse extremely persistent cookies in client's browser. The main purpose of this is to identify a clients even after they have removed standard cookies. For this type of advance identification of user, evercookie stores the cookie data in several types of storage mechanisms availabe on the browser. If evercookie has found that user has removed any of the types of cookie, it recreates them using each mechanism available.

when creating a cookie, it uses the following storage mechanisms when available.

1. standard HTTP cookies
2. Local shared Objects
3. Sliverlight Isolated Storage
4. Storing cookies in RGB values of auto generating, force-cached PNG's usiing HTML5 Canvas tag to read pixels (Cookies) back out
5. Storing cookies in Web History
6. Storing cookies in HTTP ETaqs
7. Storing cookies in web cache
8. window.name caching
9. Internet Explorer userData storage
10. HTML5 Session Storage
11. HTML5 Local Storage
12. HTML5 Global Storage
13. HTML5 Database Storage via SQLite

Evercookies introduce a new level of user tracking. The website will be able to track it's user, and reproduce deleted cookies, if at least one cookie or data in storage locations is not deleted by the user. And we can assume it's impossible to delete all cookies from all these locations because most of the user do not know about these type of storage of cookies.

what can you do to protect your system from this new kind of user tracking?

1. Add-ons like NoScript prevent the creation of several of the cookies.
2. Private browsing modes are an option as well.

Posted BY: H[4]ck3r