Re: a method for bypassing cookie restrictions in web browsers

To: Michal Zalewski <lcamtuf@xxxxxxxxxxx>
Subject: Re: a method for bypassing cookie restrictions in web browsers
From: Dave McKinney <dm@xxxxxxxxxxxxxxxxx>
Date: Mon, 19 Jan 2004 15:09:39 -0700
Cc: vuln-dev@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20040119221146.X93922@xxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20040119221146.X93922@xxxxxxxxxxxxxxxxxxxx>

This does appear to be a known way of tracking web users without 
using cookies:
http://sourcefrog.net/projects/meantime/

> 
> Any thoughts? Is the technique something new?
> 

-- 
Dave McKinney
Symantec

keyID: BF919DD7
key fingerprint = 494D 6B7D 4611 7A7A 5DBB  3B29 4D89 3A70 BF91 9DD7

Follow-Ups:
- Re: a method for bypassing cookie restrictions in web browsers
  - From: Michal Zalewski

References:
- a method for bypassing cookie restrictions in web browsers
  - From: Michal Zalewski

Prev by Date: What is the point here?
Next by Date: [SECURITY] [DSA 425-1] New tcpdump packages fix multiple vulnerabilities
Previous by thread: a method for bypassing cookie restrictions in web browsers
Next by thread: Re: a method for bypassing cookie restrictions in web browsers
Index(es):
- Date
- Thread