Show Me Your Cookie And I Will Tell You Who You Are

Details Show Me Your Cookie And I Will Tell You Who You Are Show Me Your Cookie And I Will Tell You Who You Are

2011-08-30

arxiv.org/abs/1108.5864v1

Computer Science

Cryptography and Security

Scientific paper

With the success of Web applications, most of our data is now stored on various third-party servers where they are processed to deliver personalized services. Naturally we must be authenticated to access this personal information, but the use of personalized services only restricted by identification could indirectly and silently leak sensitive data. We analyzed Google Web Search access mechanisms and found that the current policy applied to session cookies could be used to retrieve users' personal data. We describe an attack scheme leveraging the search personalization (based on the same SID cookie) to retrieve a part of the victim's click history and even some of her contacts. We implemented a proof of concept of this attack on Firefox and Chrome Web browsers and conducted an experiment with ten volunteers. Thanks to this prototype we were able to recover up to 80% of the user's search click history.

Affiliated with

Also associated with

No associations

Rating

Show Me Your Cookie And I Will Tell You Who You Are does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with Show Me Your Cookie And I Will Tell You Who You Are, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Show Me Your Cookie And I Will Tell You Who You Are will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFWR-SCP-O-728847