adminCOOKIES
Cookies are small text files that are stored on a user’s device such as a computer, smartphone or a tablet by a web browser. They are used to collect information about the users interactions with a website, such as login information, preferences and browsing behavior. Cookies are sent by a website to user’s browser and stored on the user device.
There are several types of cookies and they are; session, persistent, first party, third party, authentication, tracking/advertising, preference, session/analytics, zombie, flash, secure/http only and html cookies.
Session cookies are temporary and are deleted from the users device when the browser is closed. They are used to store information about the users current session such as items in a shopping cart.
Persistent cookies remain on the user device until they expire or are manually deleted. They are used to store information about the users preferences and settings over a longer period.
First party cookies are set by the website the user is visiting. They are often used for tracking and advertising purposes, such as amazon storing your cart.
Third party cookies are set by a website other than the one the user is currently visiting. They are often used for tracking and advertising purposes such as ads/tracking for example Facebook pixel cookies on a news site.
Authentication cookies keep the user logged in.
Tracking/advertising cookies build browsing profiles for targeted ads , for example Google ads, double click etc.
Preference cookies remember language, theme, currency and other settings necessary.
Session/analytics cookies are used to track usage patterns such as Google analytics, ga cookies etc.
Zombie cookies recreate themselves after deletion using backup data.
Flash cookies are stored on a user device in a s flash application rather than in the browser.
Secure cookies are encrypted and used for secure transactions, such as online banking and e-commerce. They have special flags that restrict cookies access for security (HTTPS –only, JavaScript inaccessible).
HTML 5 cookies are stored on a user’s device using HTML 5 storage, rather than the browser.
The advantages of cookies are; cookies allow websites to personalize the users experience by storing information about the users preferences and settings. Cookies can save users time by automatically filling forms and remembering login information. Cookies can be used to target advertising to users based on their browsing behavior and interest. Cookies can be used to track website traffic and behavior, helping website owners to improve their websites and marketing strategies.
The disadvantages of cookies are; cookies can be used to track users browsing behavior and collect personal data raising concerns about privacy and data protection. Cookies can be used to steal sensitive information such as login credentials and credit card numbers. Too many cookies can slow down browser performance and cause issues associated with website functionality. Cookies can be used to track users across multiple websites, raising concern about online surveillance. Third party cookies can also track behavior across sites. Zombie cookies can undermine the users control over their own data.
Cookies find applications in the following; cookies are used to store information about users shopping preferences and behavior, allowing for personalize or custom services. Cookies are used to target advertising to users based on their browsing behavior and interest. Cookies are used to track users interactions with social media platforms and other websites that use social media advertising services for better reach. Cookies are used as analytics to track website traffic and behavior, enabling web sites administrators to improve their websites and marketing strategies.
The future of cookies is based on the advances and development of the following technologies; stricter regulation around cookies usage by government agencies, such as EU’s GDPR and California consumer privacy act (CCPA). Many browsers are now blocking third party cookies by default and in the future may extend to blocking all cookies, except accepted by the user. It is expected that in the future cookies will become obsolete replaced by alternative tracking methods or a more decentralized approach to online identity and tracking such as finger printing and device identification.
SOURCES:
- Web security essentials for non-experts by Richard Blum.
- Web security: A comprehensive guide to secure web development by Rohan Bihani.
- The dark net inside the digital underworld by Jamie Barlett.
- Web application hacker’s handbook: finding and exploiting security flaws by Dafydi Stuttard and Marcus Pinto.
- The tangled web: A guide to securing modern web applications by Michal Zalewski.
