11 |
28 | Cookie found:uid = currently not set
29 |
30 | Click to create an evercookie. Don't worry, the cookie is a
31 | random number between 1 and 1000, not enough for me to track
32 | you, just enough to test evercookies.
33 |
34 |
35 |
36 | Now, try deleting this "uid" cookie anywhere possible, then
37 |
38 | or
39 |
40 |
41 |
42 |
43 |
44 |
45 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/obj/Debug/App.g.cs:
--------------------------------------------------------------------------------
1 | #pragma checksum "C:\Users\Ethrel\Documents\Projects\Silverlight\evercookie\evercookie\App.xaml" "{406ea660-64cf-4c82-b6f0-42d48172a799}" "D9A8BE4B3DC1C91D368CA6B44F124B38"
2 | //------------------------------------------------------------------------------
3 | //
4 | // This code was generated by a tool.
5 | // Runtime Version:4.0.30319.1
6 | //
7 | // Changes to this file may cause incorrect behavior and will be lost if
8 | // the code is regenerated.
9 | //
10 | //------------------------------------------------------------------------------
11 |
12 | using System;
13 | using System.Windows;
14 | using System.Windows.Automation;
15 | using System.Windows.Automation.Peers;
16 | using System.Windows.Automation.Provider;
17 | using System.Windows.Controls;
18 | using System.Windows.Controls.Primitives;
19 | using System.Windows.Data;
20 | using System.Windows.Documents;
21 | using System.Windows.Ink;
22 | using System.Windows.Input;
23 | using System.Windows.Interop;
24 | using System.Windows.Markup;
25 | using System.Windows.Media;
26 | using System.Windows.Media.Animation;
27 | using System.Windows.Media.Imaging;
28 | using System.Windows.Resources;
29 | using System.Windows.Shapes;
30 | using System.Windows.Threading;
31 |
32 |
33 | namespace evercookie {
34 |
35 |
36 | public partial class App : System.Windows.Application {
37 |
38 | private bool _contentLoaded;
39 |
40 | ///
41 | /// InitializeComponent
42 | ///
43 | [System.Diagnostics.DebuggerNonUserCodeAttribute()]
44 | public void InitializeComponent() {
45 | if (_contentLoaded) {
46 | return;
47 | }
48 | _contentLoaded = true;
49 | System.Windows.Application.LoadComponent(this, new System.Uri("/evercookie;component/App.xaml", System.UriKind.Relative));
50 | }
51 | }
52 | }
53 |
54 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/obj/Debug/App.g.i.cs:
--------------------------------------------------------------------------------
1 | #pragma checksum "C:\Users\Ethrel\Documents\Projects\Silverlight\evercookie\evercookie\App.xaml" "{406ea660-64cf-4c82-b6f0-42d48172a799}" "D9A8BE4B3DC1C91D368CA6B44F124B38"
2 | //------------------------------------------------------------------------------
3 | //
4 | // This code was generated by a tool.
5 | // Runtime Version:4.0.30319.1
6 | //
7 | // Changes to this file may cause incorrect behavior and will be lost if
8 | // the code is regenerated.
9 | //
10 | //------------------------------------------------------------------------------
11 |
12 | using System;
13 | using System.Windows;
14 | using System.Windows.Automation;
15 | using System.Windows.Automation.Peers;
16 | using System.Windows.Automation.Provider;
17 | using System.Windows.Controls;
18 | using System.Windows.Controls.Primitives;
19 | using System.Windows.Data;
20 | using System.Windows.Documents;
21 | using System.Windows.Ink;
22 | using System.Windows.Input;
23 | using System.Windows.Interop;
24 | using System.Windows.Markup;
25 | using System.Windows.Media;
26 | using System.Windows.Media.Animation;
27 | using System.Windows.Media.Imaging;
28 | using System.Windows.Resources;
29 | using System.Windows.Shapes;
30 | using System.Windows.Threading;
31 |
32 |
33 | namespace evercookie {
34 |
35 |
36 | public partial class App : System.Windows.Application {
37 |
38 | private bool _contentLoaded;
39 |
40 | ///
41 | /// InitializeComponent
42 | ///
43 | [System.Diagnostics.DebuggerNonUserCodeAttribute()]
44 | public void InitializeComponent() {
45 | if (_contentLoaded) {
46 | return;
47 | }
48 | _contentLoaded = true;
49 | System.Windows.Application.LoadComponent(this, new System.Uri("/evercookie;component/App.xaml", System.UriKind.Relative));
50 | }
51 | }
52 | }
53 |
54 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/obj/Debug/MainPage.g.cs:
--------------------------------------------------------------------------------
1 | #pragma checksum "C:\Users\Ethrel\Documents\Projects\Silverlight\evercookie\evercookie\MainPage.xaml" "{406ea660-64cf-4c82-b6f0-42d48172a799}" "EF5CB8E67DD7E04FA002328FDB17DC85"
2 | //------------------------------------------------------------------------------
3 | //
4 | // This code was generated by a tool.
5 | // Runtime Version:4.0.30319.1
6 | //
7 | // Changes to this file may cause incorrect behavior and will be lost if
8 | // the code is regenerated.
9 | //
10 | //------------------------------------------------------------------------------
11 |
12 | using System;
13 | using System.Windows;
14 | using System.Windows.Automation;
15 | using System.Windows.Automation.Peers;
16 | using System.Windows.Automation.Provider;
17 | using System.Windows.Controls;
18 | using System.Windows.Controls.Primitives;
19 | using System.Windows.Data;
20 | using System.Windows.Documents;
21 | using System.Windows.Ink;
22 | using System.Windows.Input;
23 | using System.Windows.Interop;
24 | using System.Windows.Markup;
25 | using System.Windows.Media;
26 | using System.Windows.Media.Animation;
27 | using System.Windows.Media.Imaging;
28 | using System.Windows.Resources;
29 | using System.Windows.Shapes;
30 | using System.Windows.Threading;
31 |
32 |
33 | namespace evercookie {
34 |
35 |
36 | public partial class MainPage : System.Windows.Controls.UserControl {
37 |
38 | internal System.Windows.Controls.TextBox txtOut;
39 |
40 | private bool _contentLoaded;
41 |
42 | ///
43 | /// InitializeComponent
44 | ///
45 | [System.Diagnostics.DebuggerNonUserCodeAttribute()]
46 | public void InitializeComponent() {
47 | if (_contentLoaded) {
48 | return;
49 | }
50 | _contentLoaded = true;
51 | System.Windows.Application.LoadComponent(this, new System.Uri("/evercookie;component/MainPage.xaml", System.UriKind.Relative));
52 | this.txtOut = ((System.Windows.Controls.TextBox)(this.FindName("txtOut")));
53 | }
54 | }
55 | }
56 |
57 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/obj/Debug/MainPage.g.i.cs:
--------------------------------------------------------------------------------
1 | #pragma checksum "C:\Users\Ethrel\Documents\Projects\Silverlight\evercookie\evercookie\MainPage.xaml" "{406ea660-64cf-4c82-b6f0-42d48172a799}" "EF5CB8E67DD7E04FA002328FDB17DC85"
2 | //------------------------------------------------------------------------------
3 | //
4 | // This code was generated by a tool.
5 | // Runtime Version:4.0.30319.1
6 | //
7 | // Changes to this file may cause incorrect behavior and will be lost if
8 | // the code is regenerated.
9 | //
10 | //------------------------------------------------------------------------------
11 |
12 | using System;
13 | using System.Windows;
14 | using System.Windows.Automation;
15 | using System.Windows.Automation.Peers;
16 | using System.Windows.Automation.Provider;
17 | using System.Windows.Controls;
18 | using System.Windows.Controls.Primitives;
19 | using System.Windows.Data;
20 | using System.Windows.Documents;
21 | using System.Windows.Ink;
22 | using System.Windows.Input;
23 | using System.Windows.Interop;
24 | using System.Windows.Markup;
25 | using System.Windows.Media;
26 | using System.Windows.Media.Animation;
27 | using System.Windows.Media.Imaging;
28 | using System.Windows.Resources;
29 | using System.Windows.Shapes;
30 | using System.Windows.Threading;
31 |
32 |
33 | namespace evercookie {
34 |
35 |
36 | public partial class MainPage : System.Windows.Controls.UserControl {
37 |
38 | internal System.Windows.Controls.TextBox txtOut;
39 |
40 | private bool _contentLoaded;
41 |
42 | ///
43 | /// InitializeComponent
44 | ///
45 | [System.Diagnostics.DebuggerNonUserCodeAttribute()]
46 | public void InitializeComponent() {
47 | if (_contentLoaded) {
48 | return;
49 | }
50 | _contentLoaded = true;
51 | System.Windows.Application.LoadComponent(this, new System.Uri("/evercookie;component/MainPage.xaml", System.UriKind.Relative));
52 | this.txtOut = ((System.Windows.Controls.TextBox)(this.FindName("txtOut")));
53 | }
54 | }
55 | }
56 |
57 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/MainPage.xaml.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.IO;
4 | using System.IO.IsolatedStorage;
5 | using System.Linq;
6 | using System.Net;
7 | using System.Windows;
8 | using System.Windows.Browser;
9 | using System.Windows.Controls;
10 | using System.Windows.Documents;
11 | using System.Windows.Input;
12 | using System.Windows.Media;
13 | using System.Windows.Media.Animation;
14 | using System.Windows.Shapes;
15 |
16 | namespace evercookie
17 | {
18 | public partial class MainPage : UserControl
19 | {
20 | private static string isoFile = "evercookie_isoData.txt";
21 | public static TextBox output;
22 | public MainPage()
23 | {
24 | InitializeComponent();
25 | output = txtOut;
26 | }
27 |
28 | [ScriptableMember()]
29 | public string getIsolatedStorage()
30 | {
31 | output.Text += "Loading isoData...\n";
32 | string data = String.Empty;
33 | using (IsolatedStorageFile isf = IsolatedStorageFile.GetUserStoreForApplication())
34 | {
35 | using (IsolatedStorageFileStream isfs = new IsolatedStorageFileStream(isoFile, FileMode.Open, isf))
36 | {
37 | using (StreamReader sr = new StreamReader(isfs))
38 | {
39 | string lineOfData = String.Empty;
40 | while ((lineOfData = sr.ReadLine()) != null)
41 | {
42 | data += lineOfData;
43 | output.Text += "Loading: " + lineOfData + "\n";
44 | }
45 | }
46 | }
47 | }
48 | return data;
49 | }
50 |
51 | public static void save(string name, string value)
52 | {
53 | output.Text += "Saving: " + name + "=" + value + "\n";
54 | using (IsolatedStorageFile isf = IsolatedStorageFile.GetUserStoreForApplication())
55 | {
56 | using (IsolatedStorageFileStream isfs = new IsolatedStorageFileStream(isoFile, FileMode.Create, isf))
57 | {
58 | using (StreamWriter sw = new StreamWriter(isfs))
59 | {
60 | sw.Write(name+"="+value);
61 | sw.Close();
62 | }
63 | }
64 | }
65 | }
66 | }
67 | }
68 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/Bin/Debug/evercookieTestPage.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | evercookie
6 |
20 |
21 |
57 |
58 |
59 |
72 |
73 |
74 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/App.xaml.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.IO;
4 | using System.IO.IsolatedStorage;
5 | using System.Linq;
6 | using System.Net;
7 | using System.Windows;
8 | using System.Windows.Browser;
9 | using System.Windows.Controls;
10 | using System.Windows.Documents;
11 | using System.Windows.Input;
12 | using System.Windows.Media;
13 | using System.Windows.Media.Animation;
14 | using System.Windows.Shapes;
15 |
16 | namespace evercookie
17 | {
18 | public partial class App : Application
19 | {
20 | public App()
21 | {
22 | this.Startup += this.Application_Startup;
23 | this.Exit += this.Application_Exit;
24 | this.UnhandledException += this.Application_UnhandledException;
25 |
26 | InitializeComponent();
27 | }
28 |
29 | private void Application_Startup(object sender, StartupEventArgs e)
30 | {
31 | MainPage scriptableControl = new MainPage();
32 | this.RootVisual = scriptableControl;
33 | HtmlPage.RegisterScriptableObject("App", scriptableControl);
34 |
35 | MainPage.output.Text = "To save: " + e.InitParams.Count.ToString() + " values\n";
36 | if (e.InitParams != null)
37 | {
38 | foreach (var item in e.InitParams)
39 | {
40 | this.Resources.Add(item.Key, item.Value);
41 | MainPage.save(item.Key,item.Value);
42 | }
43 | }
44 | }
45 |
46 | private void Application_Exit(object sender, EventArgs e)
47 | {
48 |
49 | }
50 |
51 | private void Application_UnhandledException(object sender, ApplicationUnhandledExceptionEventArgs e)
52 | {
53 | // If the app is running outside of the debugger then report the exception using
54 | // the browser's exception mechanism. On IE this will display it a yellow alert
55 | // icon in the status bar and Firefox will display a script error.
56 | if (!System.Diagnostics.Debugger.IsAttached)
57 | {
58 |
59 | // NOTE: This will allow the application to continue running after an exception has been thrown
60 | // but not handled.
61 | // For production applications this error handling should be replaced with something that will
62 | // report the error to the website and stop the application.
63 | e.Handled = true;
64 | Deployment.Current.Dispatcher.BeginInvoke(delegate { ReportErrorToDOM(e); });
65 | }
66 | }
67 |
68 | private void ReportErrorToDOM(ApplicationUnhandledExceptionEventArgs e)
69 | {
70 | try
71 | {
72 | string errorMsg = e.ExceptionObject.Message + e.ExceptionObject.StackTrace;
73 | errorMsg = errorMsg.Replace('"', '\'').Replace("\r\n", @"\n");
74 |
75 | System.Windows.Browser.HtmlPage.Window.Eval("throw new Error(\"Unhandled Error in Silverlight Application " + errorMsg + "\");");
76 | }
77 | catch (Exception)
78 | {
79 | }
80 | }
81 | }
82 | }
83 |
--------------------------------------------------------------------------------
/evercookie_sl/evercookie/evercookie.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | Debug
5 | AnyCPU
6 | 8.0.50727
7 | 2.0
8 | {4F1FD744-6C5A-4C7E-8DFB-702FBC6B9964}
9 | {A1591282-1198-4647-A2B1-27E5FF5F6F3B};{fae04ec0-301f-11d3-bf4b-00c04f79efbc}
10 | Library
11 | Properties
12 | evercookie
13 | evercookie
14 | Silverlight
15 | v4.0
16 | $(TargetFrameworkVersion)
17 | true
18 |
19 |
20 | true
21 | true
22 | evercookie.xap
23 | Properties\AppManifest.xml
24 | evercookie.App
25 | evercookieTestPage.html
26 | true
27 | true
28 | false
29 | Properties\OutOfBrowserSettings.xml
30 | false
31 | true
32 |
33 |
34 |
35 |
38 |
39 | v3.5
40 |
41 |
42 | true
43 | full
44 | false
45 | Bin\Debug
46 | DEBUG;TRACE;SILVERLIGHT
47 | true
48 | true
49 | prompt
50 | 4
51 |
52 |
53 | pdbonly
54 | true
55 | Bin\Release
56 | TRACE;SILVERLIGHT
57 | true
58 | true
59 | prompt
60 | 4
61 |
62 |
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 | App.xaml
74 |
75 |
76 | MainPage.xaml
77 |
78 |
79 |
80 |
81 |
82 | Designer
83 | MSBuild:Compile
84 |
85 |
86 | Designer
87 | MSBuild:Compile
88 |
89 |
90 |
91 |
92 |
93 |
94 |
101 |
102 |
103 |
104 |
105 |
106 |
107 |
108 |
109 | copy "$(TargetDir)$(TargetName).xap" "Y:\My Dropbox\www\evercookie\evercookie.xap"
110 |
111 |
--------------------------------------------------------------------------------
/swfobject-2.2.min.js:
--------------------------------------------------------------------------------
1 | /* SWFObject v2.2
2 | is released under the MIT License
3 | */
4 | var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.*webkit\/(\d+(\.\d+)?).*$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=parseInt(ab.replace(/^(.*)\..*$/,"$1"),10);ag[1]=parseInt(ab.replace(/^.*\.(.*)\s.*$/,"$1"),10);ag[2]=/[a-zA-Z]/.test(ab)?parseInt(ab.replace(/^.*[a-zA-Z]+(.*)$/,"$1"),10):0}}else{if(typeof O.ActiveXObject!=D){try{var ad=new ActiveXObject(W);if(ad){ab=ad.GetVariable("$version");if(ab){X=true;ab=ab.split(" ")[1].split(",");ag=[parseInt(ab[0],10),parseInt(ab[1],10),parseInt(ab[2],10)]}}}catch(Z){}}}return{w3:aa,pv:ag,wk:af,ie:X,win:ae,mac:ac}}(),k=function(){if(!M.w3){return}if((typeof j.readyState!=D&&j.readyState=="complete")||(typeof j.readyState==D&&(j.getElementsByTagName("body")[0]||j.body))){f()}if(!J){if(typeof j.addEventListener!=D){j.addEventListener("DOMContentLoaded",f,false)}if(M.ie&&M.win){j.attachEvent(x,function(){if(j.readyState=="complete"){j.detachEvent(x,arguments.callee);f()}});if(O==top){(function(){if(J){return}try{j.documentElement.doScroll("left")}catch(X){setTimeout(arguments.callee,0);return}f()})()}}if(M.wk){(function(){if(J){return}if(!/loaded|complete/.test(j.readyState)){setTimeout(arguments.callee,0);return}f()})()}s(f)}}();function f(){if(J){return}try{var Z=j.getElementsByTagName("body")[0].appendChild(C("span"));Z.parentNode.removeChild(Z)}catch(aa){return}J=true;var X=U.length;for(var Y=0;Y0){for(var af=0;af0){var ae=c(Y);if(ae){if(F(o[af].swfVersion)&&!(M.wk&&M.wk<312)){w(Y,true);if(ab){aa.success=true;aa.ref=z(Y);ab(aa)}}else{if(o[af].expressInstall&&A()){var ai={};ai.data=o[af].expressInstall;ai.width=ae.getAttribute("width")||"0";ai.height=ae.getAttribute("height")||"0";if(ae.getAttribute("class")){ai.styleclass=ae.getAttribute("class")}if(ae.getAttribute("align")){ai.align=ae.getAttribute("align")}var ah={};var X=ae.getElementsByTagName("param");var ac=X.length;for(var ad=0;ad'}}aa.outerHTML='";N[N.length]=ai.id;X=c(ai.id)}else{var Z=C(r);Z.setAttribute("type",q);for(var ac in ai){if(ai[ac]!=Object.prototype[ac]){if(ac.toLowerCase()=="styleclass"){Z.setAttribute("class",ai[ac])}else{if(ac.toLowerCase()!="classid"){Z.setAttribute(ac,ai[ac])}}}}for(var ab in ag){if(ag[ab]!=Object.prototype[ab]&&ab.toLowerCase()!="movie"){e(Z,ab,ag[ab])}}aa.parentNode.replaceChild(Z,aa);X=Z}}return X}function e(Z,X,Y){var aa=C("param");aa.setAttribute("name",X);aa.setAttribute("value",Y);Z.appendChild(aa)}function y(Y){var X=c(Y);if(X&&X.nodeName=="OBJECT"){if(M.ie&&M.win){X.style.display="none";(function(){if(X.readyState==4){b(Y)}else{setTimeout(arguments.callee,10)}})()}else{X.parentNode.removeChild(X)}}}function b(Z){var Y=c(Z);if(Y){for(var X in Y){if(typeof Y[X]=="function"){Y[X]=null}}Y.parentNode.removeChild(Y)}}function c(Z){var X=null;try{X=j.getElementById(Z)}catch(Y){}return X}function C(X){return j.createElement(X)}function i(Z,X,Y){Z.attachEvent(X,Y);I[I.length]=[Z,X,Y]}function F(Z){var Y=M.pv,X=Z.split(".");X[0]=parseInt(X[0],10);X[1]=parseInt(X[1],10)||0;X[2]=parseInt(X[2],10)||0;return(Y[0]>X[0]||(Y[0]==X[0]&&Y[1]>X[1])||(Y[0]==X[0]&&Y[1]==X[1]&&Y[2]>=X[2]))?true:false}function v(ac,Y,ad,ab){if(M.ie&&M.mac){return}var aa=j.getElementsByTagName("head")[0];if(!aa){return}var X=(ad&&typeof ad=="string")?ad:"screen";if(ab){n=null;G=null}if(!n||G!=X){var Z=C("style");Z.setAttribute("type","text/css");Z.setAttribute("media",X);n=aa.appendChild(Z);if(M.ie&&M.win&&typeof j.styleSheets!=D&&j.styleSheets.length>0){n=j.styleSheets[j.styleSheets.length-1]}G=X}if(M.ie&&M.win){if(n&&typeof n.addRule==r){n.addRule(ac,Y)}}else{if(n&&typeof j.createTextNode!=D){n.appendChild(j.createTextNode(ac+" {"+Y+"}"))}}}function w(Z,X){if(!m){return}var Y=X?"visible":"hidden";if(J&&c(Z)){c(Z).style.visibility=Y}else{v("#"+Z,"visibility:"+Y)}}function L(Y){var Z=/[\\\"<>\.;]/;var X=Z.exec(Y)!=null;return X&&typeof encodeURIComponent!=D?encodeURIComponent(Y):Y}var d=function(){if(M.ie&&M.win){window.attachEvent("onunload",function(){var ac=I.length;for(var ab=0;ab
2 |
3 |
4 |
5 |
6 |
7 | evercookie - virtually irrevocable persistent cookies
8 |
9 |
10 |
11 |
19 | 10/10/2010: Reported on by the New York Times
20 |
21 |
22 |
23 |
24 |
DESCRIPTION
25 | evercookie is a javascript API available that produces
26 | extremely persistent cookies in a browser. Its goal
27 | is to identify a client even after they've removed standard
28 | cookies, Flash cookies (Local Shared Objects or LSOs), and
29 | others.
30 |
31 | evercookie accomplishes this by storing the cookie data in
32 | several types of storage mechanisms that are available on
33 | the local browser. Additionally, if evercookie has found the
34 | user has removed any of the types of cookies in question, it
35 | recreates them using each mechanism available.
36 |
37 | Specifically, when creating a new cookie, it uses the
38 | following storage mechanisms when available:
39 | - Standard HTTP Cookies
40 | - Local Shared Objects (Flash Cookies)
41 | - Silverlight Isolated Storage
42 | - Storing cookies in RGB values of auto-generated, force-cached
43 | PNGs using HTML5 Canvas tag to read pixels (cookies) back out
44 | - Storing cookies in and reading out Web History
45 | - Storing cookies in HTTP ETags
46 | - Storing cookies in Web cache
47 | - window.name caching
48 | - Internet Explorer userData storage
49 | - HTML5 Session Storage
50 | - HTML5 Local Storage
51 | - HTML5 Global Storage
52 | - HTML5 Database Storage via SQLite
53 |
54 | TODO: adding support for:
55 | - Caching in HTTP Authentication
56 | - Using Java to produce a unique key based off of NIC info
57 |
58 | Got a crazy idea to improve this? Email me!
59 |
60 |
61 |
EXAMPLE
62 |
82 | Cookie found:uid = currently not set
83 |
84 | Click to create an evercookie. Don't worry, the cookie is a
85 | random number between 1 and 1000, not enough for me to track
86 | you, just enough to test evercookies.
87 |
88 |
89 |
90 | Now, try deleting this "uid" cookie anywhere possible, then
91 |
92 | or
93 |
94 |
95 |
97 | evercookie is written in JavaScript and additionally
98 | uses a SWF (Flash) object for the Local Shared Objects and
99 | PHPs for the server-side generation of cached PNGs and ETags.
100 |
101 | v0.4 BETA, released 10/13/2010
102 | download source here
103 |
104 | Or get it from github: http://github.com/samyk/evercookie
105 |
106 |
107 |
FAQ
108 | What is the point of evercookie?
109 | Evercookie is designed to make persistent data just that, persistent. By
110 | storing the same data in several locations that a client can access, if
111 | any of the data is ever lost (for example, by clearing cookies), the data
112 | can be recovered and then reset and reused.
113 |
114 | Simply think of it as cookies that just won't go away.
115 |
116 | PRIVACY CONCERN! How do I stop websites from doing this?
117 | Great question. So far, I've found that using Private Browsing
118 | in Safari will stop ALL evercookie methods after a browser restart.
119 |
120 | What if the user deletes their cookies?
121 | That's the great thing about evercookie. With all the methods available,
122 | currently thirteen, it only takes one cookie to remain for most, if not all,
123 | of them to be reset again.
124 |
125 | For example, if the user deletes their standard HTTP cookies, LSO data,
126 | and all HTML5 storage, the PNG cookie and history cookies will still
127 | exist. Once either of those are discovered, all of the others will
128 | come back (assuming the browser supports them).
129 |
130 | Why not use EFF's Panopticlick?
131 | Panopticlick is an awesome idea, however the uniqueness really only
132 | helps in consumer machines and typically not systems running in a
133 | business or corporation. Typically those systems are virtually
134 | identical and provide no difference in information where a home
135 | user's laptop would. Evercookie is meant to be able to store the
136 | same unique data a normal cookie would.
137 |
138 | Does this work cross-browser?
139 | If a user gets cookied on one browser and switches to another browser,
140 | as long as they still have the Local Shared Object cookie, the cookie
141 | will reproduce in both browsers.
142 |
143 | Does the client have to install anything?
144 | No, the client simply uses the website without even knowing about the
145 | persistent data being set, just as they would use a website with standard
146 | HTTP cookies.
147 |
148 | Does the server have to install anything?
149 | The server must at least have access to the JavaScript evercookie file.
150 | Additionally, to use Local Shared Object (Flash Cookies) storage, the
151 | evercookie.swf file must be present, and to use the auto-generated PNG
152 | caching, standard caching and ETag storage mechanisms, PHP must be
153 | installed and evercookie_(png|etag|cache).php must be on the server.
154 |
155 | All of these are available in the download.
156 |
157 | Is evercookie open source?
158 | Yes, evercookie is open source. The code is in readable format without
159 | any obfuscation. Additionally, the PHP files are open source as is the
160 | FLA (Flash) code used to generate the SWF Flash object. You can compile
161 | the Flash object yourself or use the pre-compiled version (evercookie.swf).
162 |
163 | How does the PNG caching work?
164 | When evercookie sets a cookie, it accesses evercookie_png.php with a special
165 | HTTP cookie, different than the one used for standard session data. This
166 | special cookie is read by the PHP file, and if found, generates a PNG file
167 | where all the RGB values are set to the equivalent of the session data to
168 | be stored. Additionally, the PNG is sent back to the client browser with
169 | the request to cache the file for 20 years.
170 |
171 | When evercookie retrieves this data, it deletes the special HTTP cookie,
172 | then makes the same request to the same file without any user information.
173 | When the PHP script sees it has no information to generate a PNG with, it
174 | returns a forged HTTP response of "304 Not Modified" which forces the web
175 | browser to access its local cache. The browser then produces the cached
176 | image and then applies it to an HTML5 Canvas tag. Once applied, evercookie
177 | reads each pixel of the Canvas tag, extracting the RGB values, and thus
178 | producing the initial cookie data that was stored.
179 |
180 | How does the Web History storage work
181 | When evercookie sets a cookie, assuming the Web History caching is enabled,
182 | it Base64 encodes the data to be stored. Let's assume this data is "bcde"
183 | in Base64. Evercookie then accesses the following URLs in the background:
184 | google.com/evercookie/cache/b
185 | google.com/evercookie/cache/bc
186 | google.com/evercookie/cache/bcd
187 | google.com/evercookie/cache/bcde
188 | google.com/evercookie/cache/bcde-
189 | These URLs are now stored in history.
190 |
191 | When checking for a cookie, evercookie loops through all the possible Base64
192 | characters on google.com/evercookie/cache/, starting with "a" and moving up,
193 | but only for a single character. Once it sees a URL that was accessed, it
194 | attempts to brute force the next letter. This is actually extremely fast
195 | because no requests are made to theserver. The history lookups are simply
196 | locally in JavaScript using the CSS History Knocker. Evercookie knows it has
197 | reached the end of the string as soon as it finds a URL that ends in "-".
198 |
199 |
USAGE
200 | <script type="text/javascript" src="jquery-1.4.2.min.js"></script>
201 | <script type="text/javascript" src="swfobject-2.2.min.js"></script>
202 | <script type="text/javascript" src="evercookie.js"></script>
203 |
204 | <script>
205 | var ec = new evercookie();
206 |
207 | // set a cookie "id" to "12345"
208 | // usage: ec.set(key, value)
209 | ec.set("id", "12345");
210 |
211 | // retrieve a cookie called "id" (simply)
212 | ec.get("id", function(value) { alert("Cookie value is " + value) });
213 |
214 | // or use a more advanced callback function for getting our cookie
215 | // the cookie value is the first param
216 | // an object containing the different storage methods
217 | // and returned cookie values is the second parameter
218 | function getCookie(best_candidate, all_candidates)
219 | {
220 | alert("The retrieved cookie is: " + best_candidate + "\n" +
221 | "You can see what each storage mechanism returned " +
222 | "by looping through the all_candidates object.");
223 |
224 | for (var item in all_candidates)
225 | document.write("Storage mechanism " + item +
226 | " returned: " + all_candidates[item] + "<br>");
227 | }
228 | ec.get("id", getCookie);
229 |
230 | // we look for "candidates" based off the number of "cookies" that
231 | // come back matching since it's possible for mismatching cookies.
232 | // the best candidate is most likely the correct one
233 | </script>
234 |
235 |