3 ms·
The EFF has a good write-up about this, too. https://www.eff.org/deeplinks/2014/07/white-house-website-includes-unique-non-cookie-tracker-despite-privacy-polic
by BrandonMarc 12y ago
The EFF has a good write-up about this, too.
https://www.eff.org/deeplinks/2014/07/white-house-website-includes-unique-non-cookie-tracker-despite-privacy-policy https://www.eff.org/deeplinks/2014/07/white-house-website-in...
Big takeaway is to avoid AddThis.com, and that NoScript - along with other tools - is an effective defense.
It's also noteworthy how this is at odds with the White House's own policy on cookies.
The White House cookie policy notes that, “as of April 18, 2014, content or functionality from the following third parties may be present on some WhiteHouse.gov pages,” listing AddThis. While it does not identify which pages, we have yet to find one without AddThis, whether open or hidden.
On the same page that is loading the AddThis scripts, the White House third-party cookie policy makes a promise: “We do not knowingly use third-party tools that place a multi-session cookie prior to the user interacting with the tool.” There is no indication that the White House knew about this function before yesterday's report.
As usual, Bruce Schneier (and his commenters) has a useful thread on the topic:
https://www.schneier.com/blog/archives/2014/07/fingerprinting_.html https://www.schneier.com/blog/archives/2014/07/fingerprintin...