A Cyber Security Expert‘s Guide to Managing Cookies and Protecting Your Privacy Online

As a cyber security professional who has defended cloud data for over a decade, one of the most frequent concerns I hear from people is how to protect their privacy online from invasive tracking. Today, I want to provide you with an in-depth look at browser cookies—what they are, how they work, and most importantly, how you can manage them to take control of your data.

Understanding Browser Cookies

Let‘s start with the fundamentals. A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. Cookies were designed to be a reliable way for websites to remember information about you and your preferences.

Here are some examples of what cookies are used for:

• Session management (keeping you logged in)
• Personalization (remembering your preferences and settings)
• Tracking (recording and analyzing your browsing behavior)

There are a few main types of cookies to be aware of:

1. First-party cookies are set by the website you are visiting directly. They are generally used for essential functions like authentication and are usually safe and beneficial.

2. Third-party cookies are set by a domain other than the one you are visiting, often for cross-site tracking, advertising, and analytics purposes. These allow companies to compile long-term records of individuals‘ browsing histories across multiple unrelated websites. According to a study from the University of Washington, third-party tracking cookies are on over 90% of popular websites.

3. Session cookies are temporary and expire when you close your browser. These are used for things like keeping items in your shopping cart.

4. Persistent cookies have an expiration date and stay on your device until that date, or until you manually delete them. These enable long-term tracking and are how sites can welcome you back by name.

Cookies are everywhere online. A 2020 analysis by Cookiepedia scanned the top 10,000 websites and found:

• The average website has 23 cookies
• 66% of cookies are third-party
• 86% of cookies last for a year or longer

The Dark Side of Cookies

While cookies are not inherently dangerous and can provide helpful functionality, they have become so ubiquitous that they pose a significant threat to privacy. Third-party tracking cookies in particular enable a form of mass surveillance that many find unacceptable.

The problem is that most people are unaware of the extent and granularity of tracking that is happening behind the scenes. A 2019 Pew Research survey found that 79% of Americans are concerned about how companies use their data, but 59% have little to no understanding of what companies actually do with the data collected.

Tracking cookies can be used to build shockingly detailed profiles about you—your demographics, location, interests, health conditions, politics, religion, purchases, and much more. This is all packaged and sold to data brokers, advertisers, and even governments and law enforcement. It‘s a multi-billion dollar industry that most of the public did not consciously sign up for.

Managing Cookies in Your Browser

Fortunately, you do not have to be a cyber security expert to take basic steps to control cookies in your browser. Every major browser provides some way to view, manage, and block cookies.

In most browsers, you can find cookie controls under Settings > Privacy/Security. Look for options to:

• See all cookies currently stored
• Block third-party cookies
• Clear existing cookies
• Set rules to allow/block cookies for specific websites

In general, I recommend blocking third-party cookies by default, while only allowing first-party cookies from sites you trust and use frequently. Here are step-by-step instructions for some popular browsers:

Chrome

1. Click the three dots in the top right and go to Settings
2. Click Privacy and security > Cookies and other site data
3. Select "Block third-party cookies"

Firefox

1. Click the three lines in the top right and go to Options
2. Select Privacy & Security
3. Under "Enhanced Tracking Protection" choose Custom
4. Check "Cookies" and select "All third-party cookies"

Safari

1. Go to Safari > Preferences > Privacy
2. Under "Cookies and website data" select "Block all cookies"

Internet Explorer

1. Click the gear icon and go to Internet Options
2. Click on the Privacy tab and move the slider to the top to block all cookies

For even more precise cookie controls, explore your browser‘s settings for managing exceptions and site-specific rules.

Inspecting Cookies Yourself

Every major browser also provides developer tools that allow you to inspect the cookies set by any website. This can be a revealing exercise to see just how many trackers some popular sites deploy.

To view cookies in Chrome:

1. Click the three dots and go to More Tools > Developer Tools
2. Click the Application tab
3. Expand the Cookies section in the storage tree

In Firefox:

1. Click the three lines and select Web Developer > Storage Inspector
2. Select Cookies in the storage tree

You can delete individual cookies or clear all cookies from the selected site.

Taking Privacy Further

In addition to managing cookies, there are a few other steps you can take to enhance your online privacy:

• Enable "Do Not Track" in your browser settings, which sends a signal telling websites not to track you (though compliance is voluntary)
• Use trusted browser extensions like Privacy Badger and uBlock Origin to block trackers
• Browse in private/incognito mode, especially for sensitive activities
• Use a VPN to mask your IP address and encrypt your traffic
• Choose privacy-respecting alternatives to services from major tech companies that have poor privacy track records

Of course, even with all these protections in place, it‘s important to understand that incognito mode and VPNs are not panaceas. They can help reduce tracking, but not completely eliminate it.

Cookies and the Law

In recent years, a number of major privacy laws have been enacted that impact how websites can use cookies. The most notable are:

• The EU‘s General Data Protection Regulation (GDPR)
• The California Consumer Privacy Act (CCPA)
• Brazil‘s Lei Geral de Proteção de Dados (LGPD)

These laws have forced many websites to provide more transparency and user choice around data collection and use of cookies. That‘s why you now see cookie consent banners and notices on most sites.

However, many experts argue that the current notice and consent model is broken. When presented with complex legalese and deceptive "dark patterns," most users simply click "I agree" without understanding what they are consenting to.

What‘s needed is a major overhaul to the opaque, convoluted web of tracking and profiling that has become the default online. As a cyber security expert, I believe we need stronger laws, enforced penalties for violations, and a system that shifts the burden from individuals to the companies collecting data.

The Future of Online Tracking

So what‘s next for cookies? Google has announced plans to phase out support for third-party cookies in Chrome within the next year. This is a step in the right direction and will significantly impact the tracking landscape. However, Google and other advertisers are exploring new tracking methods to replace third-party cookies, so the battle over online privacy is far from over.

One thing is clear: cookies are just one piece of the larger struggle between commercial profiling and individual privacy in the digital age. We need a combination of technical solutions, user awareness, and robust data protection laws to tilt the balance in favor of privacy. As an advocate and practitioner of cyber security, this is a cause I will continue to champion. The privacy of the individual must be a human right, not a luxury.

Key Takeaways

1. Cookies are small files websites use to remember you and track your behavior online.
2. Third-party cookies enable cross-site tracking and pose the greatest privacy risk.
3. You can manage cookie permissions in your browser settings and block many trackers.
4. Keep your browser clean by regularly clearing cookies and site data.
5. Use privacy-enhancing techniques like ad blockers, VPNs, and incognito mode.
6. However, truly solving the privacy crisis online will require a concerted effort from lawmakers, companies, and individuals working to reform the system.

By understanding how online tracking works and taking proactive steps to manage your digital footprint, you can significantly improve your privacy and security online. Stay safe out there!

References:

• "How Tracking Cookies Work" (Washington Post)
• "Who Tracks Your Online Privacy?" (FTC)
• "Tracking the Trackers" (The Markup)