Simple Questions: What are Cookies & What Do They Do?

When browsing the Internet you may have encountered the term "cookies". Some websites informed you about using them or your web browser had some settings about them. Even though you knew that these "cookies" are not exactly a sweet dessert, you didn't know exactly what they are and their role in browsing the web. This is why, in this article we will explain what cookies are, how they work and what kind of cookies are most frequently used.

What Are Cookies & How Do They Work?

Generally, cookies are small pieces of data sent between a sender and a receiver. A cookie is created and interpreted by the sender, while the receiver only holds it and sends it back if the sender asks for it.

When browsing the web, the sender is the server on which a website runs and the receiver is the web browser of the user that visits that website. Their purpose is to identify the user, check for his past activity on the website and provide appropriate content based on this data.

The first time a user visits a website, the server stores a particular cookie in the web browser of that user. Any other following visit on the website, the server asks for its cookie, reads it and loads a particular configuration of the website for that specific user. You can think of cookies like a tag applied by web servers to every user, which is read by web servers to identify users.

This identification is very useful especially on websites where real-time user data is critical. For example, when using an online shop, you cannot buy anything without the help of cookies. Shops wouldn't be able to identify you and build your shopping cart without them because each time you load a web page, the shop would see you as a new user and start your visit from scratch.

When Were Cookies Used For The First Time & Why?

In July 1994, an employee at Netscape Communications had to develop an ecommerce application. He had to find an easy way to keep the shopping cart for every user, without loading the server too much, so he decided that the best way to do this was to store this information in the web browser of every user. Because cookies were already used in different fields of the IT industry, he decided they could also be used for web browsing.

The first browser to use and support cookies was Mosaic Netscape, in October 1994. One year later, Internet Explorer 2 also supported cookies. Since then, all web browsers offered support for cookies.
Even though the reason why they were created is a good one, now cookies are used for all kinds of purposes, some of which are not exactly ethical.

What is the Structure of a Cookie?

Every modern web browser supports cookies and they generally have a size of 4KB.

To help you understand the structure of a cookie, we will use as an example the "has_js" cookie sent by our website - 7 Tutorials. We analyzed it using Google Chrome.

Here is its structure:

• Name - the name of the cookie.

• Content - the information the cookie contains.

• Domain - the domain using this cookie.
  
• Path - the page of the domain where to cookie is used. If the path is "/" it means that the cookie is used across the whole website.
  
• Send for - the level of security the connection needs to have in order to use the cookie.
  
• Accessible to script - it shares whether or not the cookie can be accessed through other ways than HTML.
  
• Created - the date the cookie was created on the user's web browser.
  
• Expires - the moment when the cookie expires and it is deleted by the browser.
  

What Types of Cookies Are The Most Common?

Even though the term cookie is rather general, there are many ways a cookie can be used. This is why there are different types of cookie. The most common types of cookies are the following:

• Session cookies - one of the most common types of cookies. They exist in a temporary memory until the web browser is closed. They are not harmful because all their information is deleted when your browsing session is over.
• Persistent cookies - also called tracking cookies. They last on the user's computer until they are deleted or reach their expiry date. They are used to gather information about the user, recording his or her behaviour on a specific website over a period of time.
• Secure cookies - an encrypted cookie works only when using a secure HTTPS connection. These cookies are used to ensure that their information cannot be stolen by potential hackers connected to the same network as the user. They keep important information about the user and are used mostly on websites where users perform financial transactions. Because they are encrypted, they are a lot more secure than other types of cookies.
• HttpOnly cookies - they cannot be used by any protocol other than HTTP. Such cookies ensure that only the website that created them can use them. Only session cookies can be HttpOnly and they generally do not imply any privacy or security risks for users.
• Third-party cookies - these cookies belong to a different domain, other than the one that sent them. They are usually sent by ads and can store the browsing history of a user across multiple websites that use the same advertising network. These cookies stir up privacy concerns because some ad networks use them to track way too much data about users in order to display targeted ads.
• Zombie cookie - cookies that recreate themselves after they are deleted. They are generally used by web analytics services and stored outside the browser because they are available across browsers installed on the same computer. The reason they recreate themselves is to prevent data from becoming fragmented after the user deletes the cookies. They can also be used for malicious purposes because the web browser cannot control their existence. Only security products can identify them and remove them.

Conclusion

As you have learned from this article, cookies are widely used on the Internet because they allow websites to be more powerful by providing the most useful content to every user. In some cases websites cannot function without using cookies. They also allow websites to learn about their users and the pages they are visiting. But, just like any other technology, they can also be used for less ethical purposes. That's why knowing how they work and how they are used is good for anyone that's browsing the web.

Read more »

HOW TO SECURE YOUR WI-FI CONNECTION

1. Install a Firewall A firewall helps protect your PC by preventing unauthorized users from gaining access to your computer through the

Internet or a network. It acts as a barrier that checks any information coming

from the Internet or a network, and then either blocks the information or allows it to pass through to your computer.

2. Change the Administrative Password on your Wireless Routers Each manufacturerships their wireless routers with a default password for easy initial access. These passwords are easy to find on vendor support sites, and should therefore be changed immediately.

3. Change the Default SSID Name and Turn Off SSID Broadcasting This will require your wireless client computers to manually enter the name of your SSID (Service Set Identifier) before they can connect to your network, greatly minimizing the damage fromt he casual user whose laptop is configured to connect to any available SSID broadcast it finds. You should also change the SSID name from the factory default, since these are just as well-known as the default passwords

4. Disable DHCP For a SOHO network with only a few computers, consider disabling DHCP (Dynamic Host Configuration Protocol) on your router and assigning IP addresses to your client computers manually. On newer

wireless routers, you can even restrict access to the router to specific MAC

addresses.

5. Replace WEP with WPA WEP (Wired Equivalent Privacy) is a security protocol that was designed to provide a wireless computer network with a level of security and privacy comparable to what is usually expected of a wired computer network. WEP is a very weak form of security that uses common 60 or 108 bit key shared among all of the devices on the network to encrypt the wireless data. Hackers can access tools freel yavailable on the Internet that can crack a WEP key in as little as 15 minutes. Once the WEP key is cracked, the network traffic instantly turns into clear text – making it easy forthe hacker to treat the network like any open network. WPA (Wi-Fi Protected Access) isa powerful, standards-based, interoperable security technology for wireless computern etworks. It provides strong data

protection by using 128-bit encryption keys and dynamic session keys to ensure a wireless computer network's privacy and security. Many

cryptographers are confident that WPA addresses all the known attacks on

WEP. It also adds strong user authentication, which was absent in WEP.

Read more »