tag:blogger.com,1999:blog-3024470480937744884.post2614411449887175096..comments2024-03-18T04:40:58.042-07:00Comments on Security: Bypassing the intent of blocking "third-party" cookiesChris Evanshttp://www.blogger.com/profile/01004765479735675808noreply@blogger.comBlogger5125tag:blogger.com,1999:blog-3024470480937744884.post-83880712627911022592009-12-28T08:02:08.706-08:002009-12-28T08:02:08.706-08:00http://www.grc.com/cookies
specially check the &qu...http://www.grc.com/cookies<br />specially check the "Cookie Forensics" and "Cookie Contexts" that deal with third-party cookies<br /><br />http://code.google.com/p/chromium/issues/detail?id=16658Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-3024470480937744884.post-62642445848498285682009-12-25T01:50:43.422-08:002009-12-25T01:50:43.422-08:00It's really unclear to me whether third-party ...It's really unclear to me whether third-party cookie blocking has a security model. It might be more of a privacy feature targeted at non-adaptive "adversaries."abarthhttps://www.blogger.com/profile/17687522637587092604noreply@blogger.comtag:blogger.com,1999:blog-3024470480937744884.post-22632669432988721972009-12-23T17:14:07.538-08:002009-12-23T17:14:07.538-08:00@Denis: I've not seen such a dialog on any of ...@Denis: I've not seen such a dialog on any of the browsers. I just blew away my .mozilla directory and retried and still no dialog.<br /><br />@Jeff: ugh plugins :) There's also Flash cookies which tend to ignore all policies of the host browser anyway.Chris Evanshttps://www.blogger.com/profile/01004765479735675808noreply@blogger.comtag:blogger.com,1999:blog-3024470480937744884.post-80010449605418918932009-12-23T06:23:36.459-08:002009-12-23T06:23:36.459-08:00Note that there's a 3+ year old bug in WebKit ...Note that there's a 3+ year old bug in WebKit that allows Netscape-style plugins such as Flash to set third-party cookies. See <a href="https://bugs.webkit.org/show_bug.cgi?id=26391" title="cookieAcceptPolicy not fully respected" rel="nofollow">my bug report</a> and the older bug report linked therein.Jeff Johnsonhttp://lapcatsoftware.com/noreply@blogger.comtag:blogger.com,1999:blog-3024470480937744884.post-90103566710351068522009-12-23T02:51:01.255-08:002009-12-23T02:51:01.255-08:00Does not Firefox 3.5 ask the user if he allows the...Does not Firefox 3.5 ask the user if he allows the use of LocalStorage?Denishttps://www.blogger.com/profile/15924659304094632482noreply@blogger.com