evercookie VS Cookie-AutoDelete

For a bad actor, this is easily work-around-able using various local persistence mechanisms like evercookie. https://samy.pl/evercookie/

If you're talking about the https://samy.pl/evercookie script, for what it's worth, you can defeat it (at least I can with my settings and no extensions) by...

This reminded me of something I haven't thought about in awhile: evercookie - https://github.com/samyk/evercookie

Sure, as Sevetarion said earlier "There is no actual cooke, it's just a metaphor". In contrast to "fingerprinting" a user's unique device configuration (as the rest of this demo does), anti-tracking folks use the term "cookie" broadly to refer to various ways sites can store unique values to be retrieved later. This usage grew out of Samy Kamkar's awesome "Evercookie" work in 2010 (later aka "supercookie") https://samy.pl/evercookie/

Nothing comes to mind directly, sorry. It’s something I want to look deeper into myself as well. One cool thing to look at is evercookie which is a GitHub project that allows you to make tracking cookies and the likes. The repo itself hasn’t been updated in a while but can probably be a good source of information.

Evercookie and the Favicon vuln

Client side: Use Evercookie

Also note, something like the Evercookie may also still be a thing that works. It stores data not only in cookies, but also in everything else that can retain any form of state (localStorage, HTTP browser history, HTTP cache for custom fingerprinted images generated by the server, etc.), and if even one spot doesn't get cleared by the user, the script can re-populate all the spots making for a very persistent "cookie."

You could use the Cookie Auto Delete browser extension if you want to automatically delete cookies: https://github.com/Cookie-AutoDelete/Cookie-AutoDelete

https://github.com/OhMyGuus/I-Still-Dont-Care-About-Cookies does reject non-technical cookies – as much as it can – but https://github.com/Cookie-AutoDelete/Cookie-AutoDelete will do the rest.

I use the extension Cookie-AutoDelete and it's working pretty well, but recently I saw that you can now whitelist and blacklist sites from cookie storing directly in the Chrome settings. Did anybody play around with this, is it as good as the extension, any shortcomings?

Have you made any CSSs modifications? If not, report the problem here.

Maybe look at Cookie AutoDelete. It does not do exactly what you want but more lets you keep the cookies you want (or need) for particular sites and then deletes everything else when you leave a site or at a specific time frame

https://github.com/Cookie-AutoDelete/Cookie-AutoDelete/wiki/Documentation does the job. It doesn't work on Firefox mobile, but your writing about Edge & Chrome suggests you're on PC anyway.

Yes it can.