Originally posted by tyranny22
With modification would "super-cookies" (for lack of better term) be able to retreive such sensitive information or could they be altered to track
specific persons browsing the internet?
No. Cookies are simple text files written by the web server (or in-page JavaScript), and can only be read by the domain from which they're written.
With those parameters, the only way a cookie can possibly represent anything about you personally is if you volunteer personal information to the site
writing the cookie, and their practices are sloppy enough to write that information into their cookies.
Originally posted by Vasilis Azoth
But anyway, I can't explain the potential for abuse as effectively as these sites:
www.cookiecentral.com...
www.informit.com...
Most of the information at those links are repeat misinformation popularized by the firms who create "security software" that delete your cookies
for you.
One of the arguments at the first link is that "the cookie is stored in the user's computer without her consent or knowledge." This is not true,
and part of the environment of paranoia the software firms would like to generate. Cookies have been a clearly communicated component of web browsers
since Netscape 0.9b (which I helped beta test).
One point at the second link deserves merit, the issue of potential XSS attacks to discover cookie data. While this is indeed a possibility, it's
actually very rare and exceptionally difficult to do without some level of "inside" information about the site a hacker is trying to exploit. This
is why such hacks end up being more mischievous exploits on users of blogs and forums based on open source systems. The system ATS is based on (XMB)
was vulnerable to this, but one minor alteration to the default code, and it no longer is.
Another "concern" at the second link is that a cookie from DoubleClick could be used to store your browsing history. Yes, this is possible (though
DoubleClick doesn't do it that way any more), however, your ISP now tracks your browsing history in complete detail... and they're not telling you
they're doing it. And while we're on personal history, do you have any grocery store discount cards?
Originally posted by Badge01
Also, just because it's hard to use cookies beyond tracking, unscrupulous cookie issuers will find a way around the limitations and the next thing
there goes the neighborhood.
I've been programming server-side code that writes and reads cookies since it was possible to write and read cookies.

Given the massive numbers of
talented and unscrupulous people programming web pages, don't you think we'd have a clear example of cookie abuse by now? But all we really have are
artificial concerns created by software firms.