News for hackers. Stuff that matters.

A comment on What’s Not Included in Facebook’s “Download Your Data”. Parent comment

Re:What’s Not Included in Facebook’s “Download Your Data” by richardfeynman on Tuesday April 24, 2018 @11:16AM (#16913263)
"It appears that incognito window can't read from cookies from normal windows."

To be clear, the claim I'm making is that normal windows can read cookies from incognito windows.

[ Parent | on HN ]
Re:What’s Not Included in Facebook’s “Download Your Data” by tlb on Tuesday April 24, 2018 @03:05PM (#16915603)
A simple test suggests otherwise, using Gruez's recipe above but swapping the private and non-private windows.

There are potential information leaks, such as the combination of IP address, user agent, screen size, and fonts available. And there may be bugs in 3rd party plugins like Flash that fail to respect private mode. But it doesn't seem to be anything as simple as cookies being shared.

[ Parent | on HN ]
Re:What’s Not Included in Facebook’s “Download Your Data” by richardfeynman on Tuesday April 24, 2018 @03:53PM (#16915980)
Thanks. If they're not using the temporary cookies folder, I'm curious how Facebook shows ads based on incognito browsing. Some form of device fingerprinting?
[ Parent | on HN ]