cookies
Companies Can Build Accurate User Profiles from Online History, Mozilla Research Finds
Users are sometimes tracked online despite no-track options Online profiles are accurate most of the time Large companies can build online profiles with little available data Advertisers can quickly identify users from ...
Waving the White Flag: Why InfoSec should stop caring about HTTPOnly
As a company that is constantly working with our penetration testing clients on understanding where they should focus their efforts, qualifying risk is second-nature to us. On one hand, we never want ...
Apple Turns the Anti-Ad Thumbscrews With Safari Cookie Blocking
Apple’s latest salvo in the privacy war is to fully block third-party cookies in Safari—by default ...
It’s Okay, We’re All On the SameSite
With Google’s recent announcement that all cookies without a SameSite flag will be treated as having SameSite=Lax set by default in Chrome version 80, surely Cross-Site Request Forgery will be dead? Well, ...
New Firefox Privacy Protections, Apple iOS Zero-Days, Facebook User Phone Numbers Exposed
You’re listening to the Shared Security Podcast, exploring the trust you put in people, apps, and technology…with your host, Tom Eston. In episode 85 for September 9th 2019: Firefox will now block ...
What Is Session Hijacking: Your Quick Guide to Session Hijacking Attacks
Although any computer session could be hijacked, session hijacking most commonly applies to browser sessions and web applications. The attack relies on the attacker’s knowledge of the victim’s session cookie and is ...
New EU Cookie Consent Recommendation from Advocate General
On March 21, 2019, Advocate General Maciej Szpunar (“Advocate General” or “AG”) of the Court of Justice of the European Union (“CJEU”) issued an opinion in which he recommended that the Court ...
Facebook Determined to Appeal Belgian Tracking Ban
Facebook has decided to fight the tough EU data protection laws after a 2018 Belgian court order forbade Facebook’s use of the cookies, social plug-ins and interaction buttons it used to track ...
