Showing posts with label session cookies. Show all posts
Showing posts with label session cookies. Show all posts

Tuesday, February 18, 2014

Not the cookie you were looking for

A cookie is a file saved in the user’s system. Cookies are created when the user accesses a web page; the browser finds it easier to navigate within the site and any information the user may have given while visiting the website, such as email address. Cookies are absolutely necessary for sites having huge databases. The content of a cookie is mainly the URL of the website, the duration of the cookie’s abilities and a random number together called the ID. With such little information that the cookie contains, it is not really possible to reveal any confidential information of the user.


Session and Persistent Cookie
Without cookies, websites and their servers have no memory. Without a cookie, every time you open a new web page, the server where that page is stored will treat you like a completely new visitor. The main two categories of cookies are Session and Permanent Cookies. Web pages have no memory.  A user navigating between web pages will be treated by the website as a completely new visitor every time he visits the site. Session cookies enable the website to keep track of page visits so the user is not asked for the same information that’s already available with the site. Persistent cookie files remain in the browser’s sub folder and are activated once again once the user visits the website that created that particular cookie. Persistent cookies help websites remember the user’s information and settings when you visit them in the future. This results in faster and more convenient access. Thus, cookies allow us to proceed trough many pages of a site quickly and easily without having to authenticate or reprocess each new area of visit.


Cookie Profiling
When cookies are collected to create a certain idea about a user, it is called Cookie profiling. The information that people reveal to each site they visit can be used by system administrators to build extensive personal profiles of visitors. By automatically placing a cookie on visitor’s web browsers, servers register data on the cookie. This allows administrators to view the history of site’s users, the advertisements they have viewed and the type of online transactions they have conducted. What is important to note here is that sites can only access cookies from their own domain. While cookies can be useful in some situations, some people see this as invasion of privacy.

Ad-serving using cookies
Third-party ad serving cookies solve a lot of problems that normally arise in a situation where the website’s visitor loads content from the website but the ads come from another site. Cookies help the ad serving website. Cookies limit the number of times an ad is shown. This function comes in particularly handy when dealing with pop up ads. Cookies ensure that a pop up only shows up once per visit. Some ads are more effective when shown in a particular order or sequence. By helping the website you’re viewing remember the pages you’ve visited during your browsing session, cookies enable ads to show up in a particular order. Advertisers need to know how many times their ads were shown on publisher’s websites. Cookies allow the third party ad serving website to collect this information. Cookies allow advertisers to keep track of how many people visited the advertiser’s websites through a click or a response, on the ads shown by third party as serving companies on publisher’s websites. This feature helps both the ad serving company and the advertiser dertermine if a particular advertising campaign produced the desired results.

Drawbacks
Besides privacy concerns, cookies also have some technical drawbacks. They do not always accurately identify users and can be used for security tasks. If more than one browser is used on a computer. Each has a separate storage area for cookies. Hence, cookies do not identify a person, but  a combnation of a user account, a computer and a web browser. Thus, anyone who uses multiple accounts, computers or browsers has multiple sets of cookies.
The use of cookies may generate an incompatibility between the state of the client and the state as stored on the cookie. If the user aquires a cookie and then clicks the ‘back’ button of the browser, the state on the browser is generally not the same as before that acquisition. This can lead to confusion and bugs.


Removing Cookies
Although cookies are very useful to navigate the Internet, you definitely need to know the basics of removing your cookie files so you can protect your privacy online. There are two kinds of cookies-regular text browser cookies and flash cookies. To ensure maximum web browsing privacy, you have to delete both kinds of cookies. Too many Internet users delete cookies which are text-based and leave flash cookies intact. This doesn't protect your privacy. You have to know how to delete flash cookies, too. There is no one standardized way to remove cookies since different browsers clear cookies using different procedures. Here are the steps to disable cookies based on your browser.

----------------------------------------------------------------------------------------------------------------------------------
[1] http://www.allaboutcookies.org/
[2] http://www.mediabuzz.com/
[3] http://files.investis.com/
[4] http://www.londonstimes.us/
[5] https://www.youtube.com/
[6] http://www.wikipedia.org/ 


Wednesday, February 13, 2013

Umm, Them tasty Cookies


Overview

Cookies can provide you with essential information about your website's visitors, allowing you to make the best use of your advertising dollars. Recently however, some individuals and groups are questioning the ethical issues behind online cookies. Some argue that cookies are an infringement of privacy, others think that cookies will destroy your computer. On the other side of the battle, supporters of cookies claim that cookies are mutually beneficial between web users, and site administrators. In this post I'm going to briefly discuss a few point about cookies: what a cookie is, what a cookie isn't, different types of cookies, and reasons why you as a webmaster should be using cookies on your site.

What is a Cookie?

Cookies are simply text data sent from a website, then stored on your computer's hard drive. This text contains information about the profile of the web user, such as browsing history and click patterns.The data contained in the cookie can be put to a number of uses, from helping websites identify who its visitors are, to enabling the website to effectively select the right advertisements to put in front of its visitors. Cookies also improve the website visitor's experience by remembering user's preferences. There are also many more uses for these cookies.

Cookies are made up of text data with five variable-length fields: expiration date, domain, path, secure / not secure, and name. These fields all effect how the cookie is used. The expiration date dictates when the cookie will expire. If there is no expiration date, then the cookie will expire as soon as the visitor closes the browser. The domain field is simply the name of your website. The path field contains information about what site the visitor was on before they found your site. The secure / not secure field dictates when the cookie can be retrieved. I the field is "secure," then the cookie will only be accessed through a  secure server. If the field is blank, then there is no restriction as to when the cookie can be accessed. The name field is just the name of the cookie.

Cookies also have restrictions and limitations. For example, a cookie can't be larger than 4K, and each domain can only have 20 cookies. There are no limits however on the maximum amount of cookies a browser can support. However, RCF 2109 6.3 defines the minimum amount of cookies a browser can support to be 300.

What a Cookie isn't

Cookies are not malicious programs out to destroy computers, in fact, they're not programs at all. If a computer is infected with a virus, or has spyware on it, it is true that these can read the cookies on the hard drive, but cookies aren't the problem and they will not destroy your computer; malware is the problem that needs some attention.

First Party vs Third Party cookies

All cookies can fit into one of two groups: first party cookies, and third party cookies. First party cookies are given to the website visitor by the current website domain that he is visiting. A third party cookie is one that is given to a website visitor by a different domain than which he is currently visiting. Webmasters typically use these to track visitor’s traffic to other sites. There is also a case involving first party cookies, but the information from the user, instead of going back to the original domain, is sent to a third party for analytics. To the right I've included diagrams that explain all three of these scenarios.


Session vs Persistent Cookies

Not all cookies are saved on visitor's hard drive. Session cookies are saved in a visitor's browser until they are done with their session. Session cookies allow websites to recognize their visitors as they navigate through the various webpages on their site, but then once the session is ended, the cookie is discarded. E-commerce websites use these when tracking the items in your shopping cart. Persistent cookies however, are stored in a visitor's temporary folder on their hard drive. Webmasters can use this information to identify returning users to their website.

Why Should I Use Cookies?

 Below I've included a list of reasons you should be using cookies on your website.

  • To track shopping carts on your website
  • Using cookies is the best way to follow your traffic
  • Cookies can store user preferences, improving your visitor's experience
  • If you have multiple sites, you can track your traffic between the sites
Almost all major websites are using cookies, with the exception of Federal Websites (see M-03-22). Although there are many individuals and groups out there who are against the use of cookies (mainly third party cookies), cookies are almost a necessity for any company that heavily relies on their website.

Most information used in this post was found in the links below.