Blocking cookies is an OK first step, but I was expecting this to go into things like HSTS supercookies that exploit intended behavior and aren't really fixable.