News for hackers. Stuff that matters.
Re:Who Left Open The Cookie Jar? by kevin_thibedeau on Thursday August 16, 2018 @03:11PM (#17777636)
Self destructing cookies will mostly defeat these problems unless trackers get clever about cross-correlating cookies from different sessions. Restricting JavaScript makes that even harder for them to accomplish.

For most purposes there's little benefit to keeping old cookies hanging around. Just whitelist the sites you want to stay logged in to.

Re:Who Left Open The Cookie Jar? by pvorb on Thursday August 16, 2018 @07:03PM (#17779130)
That has been my strategy lately, but it keeps getting more annoying because of all those cookie banners that now can’t remember to not show up – quite absurd and probably not intended by regulators.
Re:Who Left Open The Cookie Jar? by quiq on Thursday August 16, 2018 @07:23PM (#17779226)
There is an extension called "I don't care about cookies" [1] that takes care of those.

[1] https://addons.mozilla.org/en-US/firefox/addon/i-dont-care-a...

Re:Who Left Open The Cookie Jar? by jjeaff on Thursday August 16, 2018 @07:45PM (#17779325)
Or, if you already use ublock origin there is a blacklist in the setting that you can turn on to block all cookie banners.
Re:Who Left Open The Cookie Jar? by theseatoms on Thursday August 16, 2018 @07:24PM (#17779234)
Someone should make a GDPR notice blocker.

Edit, Haha, sibling comment links to it. Absurdity.

Re:Who Left Open The Cookie Jar? by jiveturkey on Thursday August 16, 2018 @03:53PM (#17777925)
> Self destructing cookies

Is that what Safari has? Do any other browsers have plans for this? Or stated plans to NOT do this? I imagine Chrome falls in the latter camp.

Re:Who Left Open The Cookie Jar? by pvorb on Thursday August 16, 2018 @07:10PM (#17779162)
Haven’t almost all browsers always had this feature in the form of “keep until browser is closed” or “delete local data after closing the browser”? At least Firefox and Chrome have it hidden somewhere in the settings.
Re:Who Left Open The Cookie Jar? by jiveturkey on Friday August 17, 2018 @05:10PM (#17785594)
right, right! forgot about that since (as sibling post says) I never close my browser. and since deleting all cookies on browser close is super aggressive and painful.

i'm referring to the latest safari which tracks 3rd-party cookies and deletes them automatically after 24 hours if you've never sent that cookie as a 1st-party one. thus effectively eliminating tracking, yet allowing sites to work normally without having to temporarily enable various trackers or determine which ones are "safe".

at the same time, google/chrome said they are taking a different approach which still allows tracking. i'm not sure that they said they would NOT CONSIDER implementing a feature like safari's though.

Re:Who Left Open The Cookie Jar? by pseudalopex on Thursday August 16, 2018 @11:49PM (#17780164)
When was the last time you closed your browser?
Re:Who Left Open The Cookie Jar? by cm2187 on Friday August 17, 2018 @04:20AM (#17781156)
On a desktop, every time I wonder why I am running out of RAM or why my CPU is max-ed up.
Re:Who Left Open The Cookie Jar? by Dylan16807 on Friday August 17, 2018 @08:32AM (#17782277)
Do you close all the tabs that could have tracking elements? If not, session restore preserves the cookies.
Re:Who Left Open The Cookie Jar? by cm2187 on Friday August 17, 2018 @08:42AM (#17782352)
I set the browser to flush all site data every time it closes.
Re:Who Left Open The Cookie Jar? by foxyv on Friday August 17, 2018 @09:36AM (#17782704)
I use an extension called the Great Suspender. It auto suspends pages on unused tabs. I REALLY like it.
Re:Who Left Open The Cookie Jar? by pvorb on Friday August 17, 2018 @06:18PM (#17785839)
Ich close it every few hours.
Re:Who Left Open The Cookie Jar? by confounded on Thursday August 16, 2018 @04:15PM (#17778098)
It’s a Firefox extension.
Re:Who Left Open The Cookie Jar? by jiveturkey on Friday August 17, 2018 @05:13PM (#17785608)
> unless trackers get clever about cross-correlating cookies from different sessions.

I thought some of them were already doing that by using HSTS flag as a super cookie. (but safari implemented a defense)