Disable Third-Party Cookies to Protect Against Threat
Hackers are trying by
every hook and crook to access our private information. A newly reported vulnerability
in https, the protocol that encrypts our web surfing, may now be exploited. I
have provided a link the news story at the bottom.
This is a very
technical, sophisticated exploit called HEIST. The best way to reduce your risk from this
attack is to disable third-party cookies
in your web browsers.
What
are cookies?
Here’s a nice
explanation from howtogeek.com:
“Most cookies exist for
the sake of persistence. When you visit a website such as Facebook or Twitter,
cookies let you stay logged until you log out again. This means that every time
you visit that site, you will still be logged in, which saves you the time and
effort of re-entering your password.
If you clear you
cookies, then you will be logged out (or rather, the browser will think you’re
logged out because it will have no memory of you every visiting the site in the
first place).
Third-party
cookies
Third-party cookies are
cookies placed on your device by a website other than the one you’re visiting.
For example, say you visit a website and their advertiser(s) set a cookie–this
allows that advertiser to track your visits to other websites. You probably
don’t want this to happen.
Cookies
off, errors possible
For example, you might
try to view streaming video on a website, but the video originates from another
source. In this case, you will likely see an error telling you that the video
cannot be viewed. Often, the error message will provide little clue as to what
the problem may be, but if you have third-party cookies disabled, that is most
likely the culprit.”
Howtogeek.com gives
clear instructions how to disable third-party cookies here:
News story on HEIST
exploit:
http://uproxx.com/life/https-heist-exploit/
http://uproxx.com/life/https-heist-exploit/
Thanks for reading.
Sam
Sam
---
If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.
No comments:
Post a Comment