Tag Archives: cookies

Visitor Tracking Without Cookies (or How To Abuse HTTP 301s)

British Telecom's implementation of the new cookie laws. Curiously, if you visit their site using the Opera web browser, it assumes that you've given consent, even if you click the button to not do so.

A technique for abusing HTTP 301 redirects and random numbers to uniquely track users; even those who have cookies disabled in their web browsers. Continue reading

Leading By Example

web_browser_cookie

After getting thoroughly confused by the new European Union directives on the use of cookies, which come into force later this month, Dan goes to the Information Commissioner’s website to look for some guidance… only to discover that they don’t meet the new requirements, either. Continue reading

HttpOnly Session Cookies using ActiveRecordStore in Rails 2.2

If you’re using CookieStore to manage sessions in your Ruby on Rails application, Rails 2.2 provides the great feature that you’re now able to use HTTPOnly cookies. These are a great benefit because, for compatible web browsers, they dramatically reduce the risk of a Cross… Continue reading