evercookie vs steganography

evercookie

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others. (by samyk)

Suggest topics

Source Code

samy.pl

Suggest alternative

Edit details

steganography

Implementation Hide Text In Image with encryption (by subc)

Suggest topics

Source Code

Suggest alternative

Edit details

Our great sponsors

SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App

InfluxDB - Power Real-Time Data Analytics at Scale

WorkOS - The modern identity platform for B2B SaaS

Our great sponsors

evercookie		steganography
	Project
13	Mentions	1
4,388	Stars	43
-	Growth	-
0.0	Activity	0.0
almost 2 years ago	Latest Commit	about 4 years ago
JavaScript	Language	Python
-	License	-

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

evercookie

Posts with mentions or reviews of evercookie. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-02-02.

Print off a QR code for guests to join your WiFi network
2 projects | news.ycombinator.com | 2 Feb 2024

For a bad actor, this is easily work-around-able using various local persistence mechanisms like evercookie. https://samy.pl/evercookie/
Pure CSS device fingerprinting - An experimental technique.
2 projects | /r/privacy | 28 Nov 2021

Sure, as Sevetarion said earlier "There is no actual cooke, it's just a metaphor". In contrast to "fingerprinting" a user's unique device configuration (as the rest of this demo does), anti-tracking folks use the term "cookie" broadly to refer to various ways sites can store unique values to be retrieved later. This usage grew out of Samy Kamkar's awesome "Evercookie" work in 2010 (later aka "supercookie") https://samy.pl/evercookie/
How to let Guest user submit form only once in laravel?
3 projects | /r/laravel | 31 Mar 2021

Client side: Use Evercookie
Fix favicon "supercookies" in any browser, in under a second
2 projects | /r/privacy | 1 Mar 2021

Also note, something like the Evercookie may also still be a thing that works. It stores data not only in cookies, but also in everything else that can retain any form of state (localStorage, HTTP browser history, HTTP cache for custom fingerprinted images generated by the server, etc.), and if even one spot doesn't get cleared by the user, the script can re-populate all the spots making for a very persistent "cookie."
Trying to find a GitHub/website that showed that even in incognito mode, they could track that you visited it. Even with cookies disabled
2 projects | /r/cybersecurity | 13 Feb 2021

Maybe evercookie? https://samy.pl/evercookie/
Firefox 85 Cracks Down on Supercookies
11 projects | news.ycombinator.com | 26 Jan 2021

Evercookie is a Javascript project that produces respawning super cookies:
https://github.com/samyk/evercookie

steganography

Posts with mentions or reviews of steganography. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-01-26.

Firefox 85 Cracks Down on Supercookies
11 projects | news.ycombinator.com | 26 Jan 2021

I think that they put the user information in the image using something like this[1].
[1]. https://github.com/subc/steganography

What are some alternatives?

When comparing evercookie and steganography you can also consider the following projects:

fingerprintjs - Browser fingerprinting library. Accuracy of this version is 40-60%, accuracy of the commercial Fingerprint Identification is 99.5%. V4 of this library is BSL licensed.

Laravel - The Laravel Framework.

Cookie-AutoDelete - Firefox and Chrome WebExtension that deletes cookies and other browsing site data as soon as the tab closes, domain changes, browser restarts, or a combination of those events.

web - Pi-hole Dashboard for stats and more

notrack-blocklists

uBlock - uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

Nuxt 3 - Old repo of Nuxt 3 framework, now on nuxt/nuxt

nothing-private - Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml

CSS-Fingerprint - Pure CSS device fingerprinting.

ua-client-hints - Wouldn't it be nice if `User-Agent` was a (set of) client hints?

hosts-blocklists - Automatically updated, moderated and optimized lists for blocking ads, trackers, malware and other garbage