Monday, August 15, 2016

Disable Third-Party Cookies to Protect Against Threat

Disable Third-Party Cookies to Protect Against Threat

Hackers are trying by every hook and crook to access our private information. A newly reported vulnerability in https, the protocol that encrypts our web surfing, may now be exploited. I have provided a link the news story at the bottom.
This is a very technical, sophisticated exploit called HEIST. The best way to reduce your risk from this attack is to disable third-party cookies in your web browsers.

What are cookies?
Here’s a nice explanation from howtogeek.com:
“Most cookies exist for the sake of persistence. When you visit a website such as Facebook or Twitter, cookies let you stay logged until you log out again. This means that every time you visit that site, you will still be logged in, which saves you the time and effort of re-entering your password.
If you clear you cookies, then you will be logged out (or rather, the browser will think you’re logged out because it will have no memory of you every visiting the site in the first place).

Third-party cookies
Third-party cookies are cookies placed on your device by a website other than the one you’re visiting. For example, say you visit a website and their advertiser(s) set a cookie–this allows that advertiser to track your visits to other websites. You probably don’t want this to happen.

Cookies off, errors possible
For example, you might try to view streaming video on a website, but the video originates from another source. In this case, you will likely see an error telling you that the video cannot be viewed. Often, the error message will provide little clue as to what the problem may be, but if you have third-party cookies disabled, that is most likely the culprit.”

Howtogeek.com gives clear instructions how to disable third-party cookies here:


News story on HEIST exploit:
http://uproxx.com/life/https-heist-exploit/

Thanks for reading.
Sam

---
If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send. 

No comments:

Post a Comment