how does a website recognize you ?

[The Shutter]

even though i changed ip & flushed dns , i still get this msg "You already have an account !" , i'm using a different browser for signup & still i'm getting this msg , any clue?

[anon]

Zombie cookie - Wikipedia, the free encyclopedia (http://en.wikipedia.org/wiki/Zombie_cookie)

I blame them.

[The Shutter]

i remember disabling 3rd party cookies storage but anyway i did check & it's disabled , still getting recognized :tongue:

[sebota]

try using ccleaner, and make sure you tick important things, tell us what happens ?

[seldom]

MAC address?

[Renk]

even though i changed ip & flushed dns , i still get this msg "You already have an account !" , i'm using a different browser for signup & still i'm getting this msg , any clue?


Maybe may this addon (http://www.evercookiekiller.com/) will help you, in private browsing mode.

You can test on this site: evercookie - virtually irrevocable persistent cookies (http://samy.pl/evercookie/), with or withouout the addon, on private browsing mode or not.


Some others readings about evercookies:

Anonymizer Nevercookie: Firefox Add-on to Kill the Evercookie (http://www.mytechguide.org/8760/anonymizer-nevercookie-firefox-add-on-to-kill-the-evercookie/)

It is possible to kill the evercookie (http://arstechnica.com/security/news/2010/10/it-is-possible-to-kill-the-evercookie.ars)

https://www.sb-innovation.de/showthread.php?threadid=18646

https://www.sb-innovation.de/showthread.php?threadid=22671



Changing you mac address may help you too.


If nothing works, buy an other computer, and use an other ISP. :biggrin:

[sebota]

Changing you mac address may help you too.


Are you serious/sure about this one ? They should hack his router or install a software on his PC to see his MAC (as far as I know).

Here is what I found online:


Your MAC address is only visible to the next hop, as the source and destination MAC address in each packet is changed by every router, setting the source MAC to itself, and the destination to the next hop. So your router can see your PC's MAC address, and your ISP's LNS's MAC address. Your ISP can see your router's MAC address. Anyone past your ISP cannot see your MAC, only your IP.

[Renk]

Are you serious/sure about this one ? They should hack his router or install a software on his PC to see his MAC (as far as I know).

Here is what I found online: (...)


My post was mainly devoted to evercookies.

Concerning the mac address, I said changing it "may help". I don't know whether TheShutter as an IPV6 connection or not. But if he has, his ipv6 address may contain (in some coded and easy to decode form) the mac address of his PC. See for example:

privacy - How to avoid exposing my MAC address when using IPv6? - Super User (http://superuser.com/questions/243669/how-to-avoid-exposing-my-mac-address-when-using-ipv6)

[sebota]

My post was mainly devoted to evercookies.

Concerning the mac address, I said changi,ng it "may help"

I wasn't making fun of you, I was just asking, :tongue: .
I just wanted to know if what you said was based on known security facts or just extra precautions, thanks for the details, first time I hear about IPv6 issue :top:

[anon]

first time I hear about IPv6 issue :top:

Same here. Renk knows his stuff.

As for the evercookies, the quickest way to know if it's them or not is to use Opera or Chrome on a private/incognito tab. They'll ignore any already-existing data.

[sebota]

Same here. Renk knows his stuff.

As for the evercookies, the quickest way to know if it's them or not is to use Opera or Chrome on a private/incognito tab. They'll ignore any already-existing data.

We will wait and see what The Shutter reports back... :)

@ The Shutter, I just remembered one very important note with ccleaner, Go to Options --> Cookies , you have two sides, left "cookies to delete" and right "cookies to keep", by default I had 7 cookies on "cookies to keep" list , To be 100% safe you should move them to the left side (cookies to delete) otherwise ccleaner will NOT delete them and they could use them to identify you.

They were:

google.com
google.com/accounts
login.live.com
mail.google.com
Google (http://www.google.com)
www.google.com/accounts
yahoo.com