samyk / evercookie

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
https://samy.pl/evercookie/
4.43k stars 662 forks source link

IDEA: Use virtual FileAPI #97

Open io4 opened 9 years ago

io4 commented 9 years ago

I got the idea that http://www.html5rocks.com/en/tutorials/file/filesystem/ can be used to store a copy of the cookie.

PD: I don't know if this is posible but JS could generate a SSL client key and browser would store it. Then server ascoiates SSL fingerprint with cookie. But user may notice that key is saved on some browsers.