RE: Bypassing cookie restrictions in IE 5+6

From: Christopher G. Lewis (Chrisat_private)
Date: Tue Aug 06 2002 - 13:21:48 PDT

Next message: GreyMagic Software: "RE: Bypassing cookie restrictions in IE 5+6"

Previous message: 3APA3A: "SECURITY.NNOV: Windows 2000 system partition weak default permissions"
Maybe in reply to: Jelmer: "Bypassing cookie restrictions in IE 5+6"
Next in thread: GreyMagic Software: "RE: Bypassing cookie restrictions in IE 5+6"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Jelmer  - 

> Bypassing cookie restrictions in IE 5+6
> 
> Description
  <snip>
> This behaviour completely ignores the privacy settings and allows 
> website owners and advertisers to start tracking your every move once 
> again.
  <snip>
> Workaround:
> 
> disable active scripting

If you turn off userdata persistence in the security zone, you can
completely turn off userdata.
Tools|Internet Options
  Security Tab
  Custom Level Button
    <last option in Miscellaneous>
    Userdata persistence
      <set to>Disable

But yes, MS should use the "Per-Site Privacy Actions" that are available
with cookies for UserData 

Chris

> -----Original Message-----
> From: Jelmer [mailto:jelmerat_private]
> Sent: Saturday, August 03, 2002 8:43 PM
> To: bugtraqat_private; secureat_private
> Subject: Bypassing cookie restrictions in IE 5+6

Next message: GreyMagic Software: "RE: Bypassing cookie restrictions in IE 5+6"
Previous message: 3APA3A: "SECURITY.NNOV: Windows 2000 system partition weak default permissions"
Maybe in reply to: Jelmer: "Bypassing cookie restrictions in IE 5+6"
Next in thread: GreyMagic Software: "RE: Bypassing cookie restrictions in IE 5+6"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Aug 06 2002 - 18:25:43 PDT