Tech: Cookies may be public in IE for Win

Subject: Cookies may be public in IE for Win
From: Pene Azul
Date: 11 May 00 - 07:17 PM

I read a disturbing article on Slashdot.org about how hostile websites can read your cookies through Internet Explorer for Windows if Java scripting is enabled. The article, MSIE's Cookies Are Public, contains a link to a demonstration.

PA

Subject: RE: BS: Cookies may be public in IE for Win
From: MK
Date: 11 May 00 - 08:45 PM

Hi Pene,
Your words are quite true. But the catch 22, is that you need Java scripting enabled in order to the enhance the functionality of the majority of websites one might visit on the Internet.

The best and most thorough remedy is to delete every single cookie manually (NOT thru IE) in the Windows Temporary Internet Files folder contain within the root directory of Windows. Easiest and quickest way to do so, is to open that folder, click on the first file at the top so it highlights, and then scroll down to the very bottom of the file list and holding the SHIFT key down, click on the file on the bottom, which will in turn highlight every file. Then right click, and hit DELETE.

You can always reset your cookie for this place when you visit, and other important sites that require cookies enabled.

Also, go into the Tools ---Security ---Custom of IE, and in the section that pertains to cookies, instead of clicking "Accept" click "prompt", and then when you visit a website, you have the option of not accepting their cookies. On certain sites this might affect the functionality of their web pages; on others it won't.

Lastly, download this free program called Optout. It searches your hardrive for "spyware" a.k.a. cookies planted and nestled on your hardrive by websites that receive hidden information that the cookies invisibly send back, while you are connect online. Run Optout right after your finish deleting all your cookies. Make the two procedures part of your surfing routine. The whole process takes 2 minutes. (There are also shareware programs that contain spyware, such as Cute FTP and a bunch of others. You can read all about this at the OPTOUT website.)

Subject: RE: BS: Cookies may be public in IE for Win
From: Pene Azul
Date: 11 May 00 - 09:25 PM

Michael, I actually already do all of theose things (and more), except that I find it nearly impossible to use "Prompt" for cookies. I just found it interesting (though not surprising) that non-originating sites can read cookies. This may add a little weight to IE in the battle of which browser I hate more. Your points are certainly well-made.

PA

Subject: RE: BS: Cookies may be public in IE for Win
From: JenEllen
Date: 11 May 00 - 09:32 PM

Okay fellas, help me out here. Not a hint of sarcasm or flaming, just an honest question from a techno-eejut. I had a discussion similar to this with Jon a few months ago. My question is what is the real problem with this, and who on earth would WANT my cookies? What can we the unenlightened ones do about this to protect ourselves? Thanks,
~JenEllen

Subject: RE: BS: Cookies may be public in IE for Win
From: Pene Azul
Date: 11 May 00 - 09:45 PM

For the most part, stealing your cookies would serve no purpose. It is, however, possible that someone could use certain cookies to pose as you or collect personal information about you. Keep in mind that you probably have several cookies that you don't request. Many of the banner advertisers place cookies on your machine that track your browsing habits and your personal information.

PA

Subject: RE: BS: Cookies may be public in IE for Win
From: JenEllen
Date: 12 May 00 - 12:16 AM

Thanks Pene, taken to heart. ~Elle

Subject: RE: BS: Cookies may be public in IE for Win
From: MudGuard
Date: 12 May 00 - 02:57 AM

Michael K,
instead of scrolling down to the end of the list, simply press Control-key together with A key (Ctrl-A) which is a shortcut in most programs for "Select All"
MudGuard

Subject: RE: BS: Cookies may be public in IE for Win
From: Pene Azul
Date: 17 May 00 - 11:31 PM

A patch is now (finally) available through Windows Update.

PA