News for hackers. Stuff that matters.

A comment on Firefox rolls out Total Cookie Protection by default to all users. Parent comment

Re:Firefox rolls out Total Cookie Protection by default to a... by Ayesh on Tuesday June 14, 2022 @10:28AM (#31740047)
> Does this only work if you use the same email across multiple sites? At a huge risk of EU regulars cracking on, it is quite possible to track a user across multiple accounts by simply using a cookie that lives long enough (say, 30 days) to establish the connections between multiple accounts.

For a server-side ID sync, you don't even need user accounts. Just a unique ID set in a cookie will do.

[ Parent | on HN ]
Re:Firefox rolls out Total Cookie Protection by default to a... by nightpool on Tuesday June 14, 2022 @03:16PM (#31744568)
How would this work when the cookie ID is different for every different embedding (first-party) context? That's the whole point of total cookie isolation.
[ Parent | on HN ]