samyk / evercookie

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
https://samy.pl/evercookie/
4.42k stars 663 forks source link

LSO's not working #93

Open waypost opened 9 years ago

waypost commented 9 years ago

While LSO's are working on the samy.pl example site, running on my server I am not able to store or recall LSO's.

No javascript errors are coming up, however the looking at the network tab in chrome, there is a long pause between when evercookie.swf executes until the next file loads (evercookie_etag.php).

Here are the results:

Storage mechanism userData returned: undefined Storage mechanism cookieData returned: 12345 Storage mechanism localData returned: 12345 Storage mechanism globalData returned: undefined Storage mechanism sessionData returned: 12345 Storage mechanism windowData returned: 12345 Storage mechanism pngData returned: 12345 Storage mechanism etagData returned: 12345 Storage mechanism cacheData returned: 12345 Storage mechanism idbData returned: 12345 Storage mechanism dbData returned: 12345 Storage mechanism lsoData returned: undefined

the options I have changed are:

var ec = new evercookie({ history: false, baseurl: '/test/evercookie', asseturi: '/assets', phpuri: '/php' });

There are no errors in my apache logs or javascript console - again, it works in my browser at "http://samy.pl/evercookie/" just not on my environments (my local mac running apache or my server Redhat running nginx/php-fpm)

am I missing some important configuration detail?

waypost commented 9 years ago

Update: It turns out that the XSS fix submitted FEB 3 was causing the issue, I have used the previous version of assets/evercookie.swf to resolve the issue.

I believe it is not allowing evercookie's LSO functionality to work in any path except for the root. I do not have Adobe Flash, so I cannot repair the issue myself.

samyk commented 9 years ago

Ack -- same here. Anyone else have access or able to build a new fla/swf?

iNilo commented 8 years ago

Can confirm, when switching back to FEB3 most LSO's start working again, however I cannot get eTag or PNG to work

iNilo commented 8 years ago

Download link for those that want it

https://github.com/samyk/evercookie/tree/2b7f8401e99b8c948d5c724bb6651cdd94ca6cb5/assets