Safari Cookie Privacy Workaround

This Entry:
Date: 2005-04-18
Time: 22:57
Comments: 0



Return To:
Recent Entries

Elsewhere:
Category Selector

Search:
Archive:
 • Jul 2008 (2)
 • Jun 2008 (4)
 • Apr 2008 (2)
 • Mar 2008 (2)
 • Feb 2008 (2)
 • Jan 2008 (4)
 • Dec 2007 (2)
 • Nov 2007 (4)
 • Oct 2007 (1)
 • Sep 2007 (6)
 • Aug 2007 (4)
 • Jul 2007 (3)
 • Jun 2007 (2)
 • May 2007 (2)
 • Apr 2007 (4)
 • Mar 2007 (2)
 • Feb 2007 (4)
 • Jan 2007 (4)
 • Dec 2006 (4)
 • Nov 2006 (24)
 • Oct 2006 (3)
 • Sep 2006 (1)
 • Aug 2006 (2)
 • Jul 2006 (3)
 • Jun 2006 (6)
 • May 2006 (5)
 • Apr 2006 (5)
 • Mar 2006 (1)
 • Feb 2006 (8)
 • Jan 2006 (11)
 • Dec 2005 (8)
 • Nov 2005 (12)
 • Oct 2005 (10)
 • Sep 2005 (18)
 • Aug 2005 (8)
 • Jul 2005 (10)
 • Jun 2005 (14)
 • May 2005 (8)
 • Apr 2005 (10)
 • Mar 2005 (14)
 • Feb 2005 (12)
 • Jan 2005 (12)
 • Dec 2004 (9)
 • Nov 2004 (18)
 • Oct 2004 (13)
 • Sep 2004 (12)
 • Aug 2004 (16)
 • Jul 2004 (6)
 • Jun 2004 (10)
 • May 2004 (8)
 • Apr 2004 (8)
 • Mar 2004 (27)
 • Feb 2004 (19)
 • Jan 2004 (8)
 • Dec 2003 (10)
 • Nov 2003 (18)
Random Entry

Others:
 • Jen
 • Keltie
 • On LiveJournal

Safari Cookie Privacy Workaround

I like the Safari web browser, but it is lacking a privacy option that I think is important. I want Safari to accept cookies, but to throw them away at the end of my session.

Background about cookies for those not in the know: The web serves files over transient connections. That means that if you request two web pages in a row from the same server, the server has no idea that you are the same person requesting both pages. This is both a great benefit and a terrible mistake in terms of system design. It is a benefit because (amongst other reasons) the powers that be have trouble tracking an individual to profile their use of the web. It is a mistake because many sites (think of your online banking) want to establish a session with you; they want to authenticate you using your password and then exchange a number of requests with someone who they hope continues to be you.

To partially mitigate the problem, Netscape developed the Cookie system. It was a silly name, but the idea was OK… The website essentially tells your web browser to take a number, and present that number whenever it asks for a page. Now you can have sessions, because that number identifies you. As long as the server gives out numbers intelligently, it can be reasonably sure that you are still you. This is how your online banking works.

Cookies have a light side and a dark side. They can help you do your online banking and then expire when you quit your browser. The site that hands it out can also ask that it be retained until a certain time; this is more problematic. This is how Amazon.com always seems to know your name, your browsing habits and what books you might like.

As you know, many browsers allow you to switch off cookies. This is a bad trade-off, however, if you want to do any banking online, or establish a session with any website at all. A few very good browsers allow you to do something smart: accept all the cookies, but throw them away when your browser is closed — even if the website had asked that they be kept indefinitely. That means that Amazon can try to track you (and they will, while your browser is open) but tomorrow you look like a new person they’ve never seen before. Meanwhile your banking keeps working.

Safari does not support this option. Which is my biggest irritation with it. However, someone has found a way to manipulate the filesystem permissions to produce the same effect! There’s a discussion of how to do it here. I haven’t tried it in Tiger, but it works in Panther!

return to cmh blog Science & Nature › technology     2005-04-18 22:57   ...0
Add your comment...

your name Help stop spammers: prove you're human! 
    Three plus three is: (learn more
subject/title
comment





All content © 2003-2005 by Colin Henein. All rights reserved.
People & Places CMH Science & Nature Opinion Arts & Literature Sports & Leisure