Hacker GitHub

← All repos

samyk/evercookie

View on GitHub ↗ ★ 4,720 JavaScript

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.

20 mentions on Hacker News by 19 people: 5 stories, 15 comments · first 2013-06-18 · latest 2022-11-30

Mentions per year 20 mentions · busiest year 2020 (4)
20082026
AllStoriesComments NewestTopOldest
  1. This reminded me of something I haven't thought about in awhile: evercookie - https://github.com/samyk/evercookie
    comment by josephscott · 2022-11-30 · in Using a date-modified header to detect unique visitors without using cookies
  2. Evercookie is a Javascript project that produces respawning super cookies: https://github.com/samyk/evercookie It's quite dead now, stopped working around 2017: https://github.com/samyk/evercookie/issues/125
    comment by kristofferR · 2021-01-26 · in Firefox 85 cracks down on supercookies
  3. …ETAG method on evercookie project. HTML5 Canvas is also a funny/smart technique that I saw there. https://github.com/samyk/evercookie One of the purposes of the evercookie project was to have a collection of tracking methods that browser…
    comment by stunt · 2020-06-28 · in Show HN: Server-Side Tracking Without Cookies in Go
  4. …- Attempts to escape the applet sandbox and write cookie data directly to the user's hard drive. https://github.com/samyk/evercookie In short, everything and more can be used for tracking, and that has really killed the party for the many…
    comment by reilly3000 · 2020-03-26 · in Private client-side-only PWAs are hard, but now Apple made them impossible
  5. …dubious techniques to track people - look at the HTML canvas example for how it's done with a PNG: https://github.com/samyk/evercookie/blob/6d44cb8ad1eda23c9a5... Luckily, the partitioning of browser caches on a per domain basis as…
    comment by EdwardDiego · 2020-01-26 · in We Wasted $50K on Google Ads So You Don't Have To (2019)
  6. …> do you believe it will be used for nefarious purposes? If one is nefarious of heart, https://github.com/samyk/evercookie supersedes ImmortalDB.
    comment by grun · 2019-01-29 · in ImmortalDB – A resilient key-value store for the browser
  7. It's based on Evercookie https://github.com/samyk/evercookie which is a little less... friendly.
    comment by penagwin · 2019-01-28 · in ImmortalDB – A resilient key-value store for the browser
  8. …or Java -- which do? Evercookie, a similar library, uses Flash, Silverlight, and/or Java. See https://github.com/samyk/evercookie . > No offence to the author but all this sound malicious. Perhaps this is why evercookie isn't maintained?…
    comment by grun · 2018-10-25 · in Show HN: IronDB – a resilient key-value store for the browser
  9. …methods like this, or: BrowserFingerprinting - https://panopticlick.eff.org/ Super/Ever Cookies - https://github.com/samyk/evercookie HSTS identification - https://www.owasp.org/index.php/HTTP_Strict_Transport_Securi... or whatever the new…
    comment by michaelbuckbee · 2018-05-31 · in Side-channel attacking browsers through CSS3 features
  10. …use the cached immutable resource. Similar to how this[1] works by using multiple storage methods. https://github.com/samyk/evercookie
    comment by simcop2387 · 2017-09-16 · in HTTP Immutable Responses
  11. …a very cool project, it has some scary implications on users not trained in their removal. [0] https://github.com/samyk/evercookie
    comment by FilterSweep · 2016-11-16 · in PoisonTap, a $5 tool that invades password-protected computers
  12. …proprietary methods may be running under the radar, as Verizon's UIDH did for two years.[1] [0] https://github.com/samyk/evercookie/ [1] http://www.theregister.co.uk/2015/01/30/verizon_uidh_super_c...
    comment by mirimir · 2015-08-06 · in Privacy Badger – Block spying ads and invisible trackers
  13. …a good guide to some of the ways that evercookie uses to live on even after you've cleared cookies: https://github.com/samyk/evercookie
    comment by rustyconover · 2014-09-27 · in Technical analysis of client identification mechanisms
  14. …identify Tor users. For those of you who doesn't know about Evercookie : http://samy.pl/evercookie/ https://github.com/samyk/evercookie
    comment by Globz · 2014-07-03 · in Tor users are selected and monitored by the NSA as extremists
  15. …uses thirteen different storage mechanisms, making it almost impossible to delete. [1] - https://github.com/samyk/evercookie
    comment by nuxi · 2013-06-18 · in A Popular Ad Blocker Also Helps the Ad Industry