Piracy vs. Privacy

Interesting article about SuperCookies can be found here http://www.securityfocus.com/archive/1/250363
Since it appears as though the battle between internet users and spyware is here to stay, I would like to find some accurate information on the exact working of cookies. For example I would like to know the effects on the spyware servers when instead of deleting the cookies I edit and add several lines of ~ or similar characters.

 

I-034: Internet Cookies

The Cookie Concept

How Internet Cookies Work

Click on the "Printable version" link to get everything on one page.

 

rceratto:

The article you referenced links to the supercookie demo which links to another page, http://www.computerbytesman.com/privacy/supercookie.htm which says:

"In newer versions of WMP, there is an option on the "Tools | Options" Menu called "Allow Internet sites to uniquely identify your player ". If this option is manually turned off, SuperCookies will also be disabled because Internet Explorer will generate a new player ID number each IE session. "

I checked my Windows Media Player 6.4 on the View, Options, Player tab and the option was already de-selected.

This was mentioned in Microsoft Security Bulletin MS01-029

Speaking of WMP there was a "superpatch" issued Nov 20 2001 that included all previous security patches: Microsoft Security Bulletin MS01-056

Edited by DD 1/18 to correct "quote" format.

 

Thanks Looks like I've got some reading to do.

 

Bringing this thread back to the top.

I have done a lot of reading without finding the answer to my original question. Since I consider all the spyware and spamware to be malicious users who cause a user's system to do things without affording the option to say NO, I'm quite certain that I am allowed to edit any file that resides on my hard drive.
It would be nice if someone with more knowledge than me could respond with my chances of being arrested if this cookie editing has the desired effect on the spyware servers.

 

Cookies are set by websites. Only the websites that set them can use them, for example, this BB. Cookies are text files. They can do nothing, period.

Spyware doesn't use cookies. It's actual programs running in the background, logging sites visited and so on, and phoning home to send the logged data. Cookies do not and cannot do that.

You can defile cookies to the extent of filling them with selected quotes from a drunken longshoreman and it will affect spyware not one iota. The gendarmes will not pound on your door at 3:00 AM to bust your buns for violating Section 12345 of the Federal Code on felonious cookie-tampering.

You can set your browser to reject all cookies and it won't make any difference. You can delete them and it won't make any difference. The spyware will still be running and logging and reporting.

What you CAN do is go to one of the spyware sites listed in the "welcome" thread at the top of this forum and fetch a spyware removal tool, end of problem.

A few of the programs that install the spyware will not work without it, but that's a potential hidden cost of freeware.