# Hide from cookies: question!

**URL:** <https://boards.straightdope.com/t/hide-from-cookies-question/57808>\
**Category:** Factual Questions\
**Created:** [March 13, 2001, 4:18pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808 "2001-03-13T16:18:37Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kansas\_Man](https://avatars.discourse-cdn.com/v4/letter/k/eada6e/32.png) [@Kansas\_Man](https://boards.straightdope.com/u/Kansas_Man)\
**Post date:** [March 13, 2001, 4:18pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/1 "2001-03-13T16:18:37Z")

</div>

I noticed that all the cookies sent to my computer from websites start with myname@whatever.com.TXT. I assume that the cookies is getting my name from some user info on my computer.

Is there any way (short of changing that user info name on my computer) to trick the cookie into thinking I’m not me?

---

<div class="post-metadata">

**Author:** ![yabob](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/yabob/32/2821_2.png) [@yabob](https://boards.straightdope.com/u/yabob)\
**Post date:** [March 13, 2001, 7:49pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/2 "2001-03-13T19:49:01Z")

</div>

I’m not really sure what you’re asking. The name you refer to is the file naming convention used by IE to store cookies, and simply relects the way the browser chooses to implement cookie storage. Netscape, for instance, keeps the cookies in one file called “cookies.txt”, which can be kept in user-specific directories if you have multiple user profiles defined.

That \<user\>@\<path\> filename really has nothing to do with the cookie content that is sent back to the site, it’s just a convention for IE to be able to find cookie definitions based on your local identity and the path to a given site. What is sent to the site is the cookie contents contained in the file. You could probably change the path part of the filename, and change which sites would get particular cookies sent to them, and you could probably change the username part, and your browser wouldn’t see those cookies anymore, or would see some originally intended for another local user. Both seem rather pointless exercises.

---

<div class="post-metadata">

**Author:** ![yabob](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/yabob/32/2821_2.png) [@yabob](https://boards.straightdope.com/u/yabob)\
**Post date:** [March 13, 2001, 7:59pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/3 "2001-03-13T19:59:47Z")

</div>

Actually, let me ammend that slightly - the mapping of site to filename is in a file called index.dat in that same directory. The file name is possibly mangled, and doesn’t reflect the real full site name for the target of the cookie. To change anything, you would have to mess with index.dat. Don’t. It’s got binary data in it.

---

<div class="post-metadata">

**Author:** ![Kansas\_Man](https://avatars.discourse-cdn.com/v4/letter/k/eada6e/32.png) [@Kansas\_Man](https://boards.straightdope.com/u/Kansas_Man)\
**Post date:** [March 13, 2001, 8:14pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/4 "2001-03-13T20:14:01Z")

</div>

> [@](#):
>
> \*Originally posted by yabob \*  
> \*\*I’m not really sure what you’re asking. The name you refer to is the file naming convention used by IE to store cookies, and simply relects the way the browser chooses to implement cookie storage… [snip]
> 
> That \<user\>@\<path\> filename really has nothing to do with the cookie content that is sent back to the site, it’s just a convention for IE to be able to find cookie definitions based on your local identity and the path to a given site. What is sent to the site is the cookie contents contained in the file. [snip]  
> \*\*

Okay, some privacy guy was saying something about cookies on TV and my friend (who is a bit of a privacy freak) was worried that Hotmail or Yahoo could trace certain, umm, (legal) adult pics back to him.

(He sometimes sends these pics to his buddies by email!)

He uses a false name at Yahoo, and has even used website services that block the originating IP address (or at least, provide a false one). His concern was that even with this kind of privacy, the cookies on his computer (which include his real name in the file name!!) would be sent to Hotmail or Yahoo and linked back to him.

I guess what you are saying is that Hotmail or Yahoo cannot use cookies to identify users who sent email?

---

<div class="post-metadata">

**Author:** ![yabob](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/yabob/32/2821_2.png) [@yabob](https://boards.straightdope.com/u/yabob)\
**Post date:** [March 13, 2001, 8:41pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/5 "2001-03-13T20:41:31Z")

</div>

Depends on what he has volunteered to a given site. If you look at the CONTENTS of one of those files, that’s the information that’s being sent back to the site. Somewhat hard to read for IE because there’s some binary control data in there. Usually, it will just be an identifier that lets them look up whatever information they’ve kept about you on their site, or obtained elsewhere based on what they know.

Here’s a basic background document on cookies that I think is pretty good:

[http://www.cknow.com/ckinfo/cookies.htm](http://www.cknow.com/ckinfo/cookies.htm)

---

<div class="post-metadata">

**Author:** ![friedo](https://avatars.discourse-cdn.com/v4/letter/f/8edcca/32.png) [@friedo](https://boards.straightdope.com/u/friedo)\
**Post date:** [March 13, 2001, 8:59pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/6 "2001-03-13T20:59:34Z")

</div>

> [@](#):
>
> \*Originally posted by Kansas Man \*
> 
> He uses a false name at Yahoo, and has even used website services that block the originating IP address (or at least, provide a false one). His concern was that even with this kind of privacy, the cookies on his computer (which include his real name in the file name!!) would be sent to Hotmail or Yahoo and linked back to him.
> 
> I guess what you are saying is that Hotmail or Yahoo cannot use cookies to identify users who sent email?

The filename of the cookie is not sent back to Yahoo, only the contents of the cookie. Since the contents of the cookie _come from Yahoo_, there is no way it can contain anything Yahoo doesn’t already know.

---

<div class="post-metadata">

**Author:** ![CurtC](https://avatars.discourse-cdn.com/v4/letter/c/ce73a5/32.png) [@CurtC](https://boards.straightdope.com/u/CurtC)\
**Post date:** [March 13, 2001, 10:58pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/7 "2001-03-13T22:58:15Z")

</div>

friedo wrote:

> [@](#):
>
> The filename of the cookie is not sent back to Yahoo, only the contents of the cookie. Since the contents of the cookie come from Yahoo, there is no way it can contain anything Yahoo doesn’t already know.

Except that there’s a cookie security issue with IE, where any web site can read the cookies from any other web site. So if you have an [Amazon.com](http://Amazon.com) account, then the [nakedchicks.com](http://nakedchicks.com) web site can read the information set by Amazon. See the web page [http://www.peacefire.org/security/iecookies/](http://www.peacefire.org/security/iecookies/) for a demonstration.

BTW, if you haven’t tried the [Opera](http://www.opera.com), you’ve missed out on a browser with cool features.

---

<div class="post-metadata">

**Author:** ![handy](https://avatars.discourse-cdn.com/v4/letter/h/b5a626/32.png) [@handy](https://boards.straightdope.com/u/handy)\
**Post date:** [March 14, 2001, 12:37am UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/8 "2001-03-14T00:37:33Z")

</div>

If you want to manage your cookies get a cookie manager from [download.com](http://download.com) Mac or PC, they should have something.

Hey, one time Ilooked at cookies on my puter there were more than 1000… 🙂

---

<div class="post-metadata">

**Author:** ![handy](https://avatars.discourse-cdn.com/v4/letter/h/b5a626/32.png) [@handy](https://boards.straightdope.com/u/handy)\
**Post date:** [March 14, 2001, 12:40am UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/9 "2001-03-14T00:40:05Z")

</div>

BTW, you can tell your browser to not send out cookies. AT least I can with Netscape.

---

<div class="post-metadata">

**Author:** ![Kansas\_Man](https://avatars.discourse-cdn.com/v4/letter/k/eada6e/32.png) [@Kansas\_Man](https://boards.straightdope.com/u/Kansas_Man)\
**Post date:** [March 14, 2001, 2:28pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/10 "2001-03-14T14:28:53Z")

</div>

> [@](#):
>
> \*Originally posted by handy \*  
> \*\* BTW, you can tell your browser to not send out cookies. AT least I can with Netscape. \*\*

Handy,

How do you tell Netscape not to **send** out any cookies? I use v4.73 and under Preferences - Advanced, the cookie section gives only these four options:

-Accept all cookies  
-Accept only cookies that get sent back to their orginating server  
-Disable cookies

- Warn me before accepting cookie  
I don’t think you are talking about these options? Are you?

---

<div class="post-metadata">

**Author:** ![handy](https://avatars.discourse-cdn.com/v4/letter/h/b5a626/32.png) [@handy](https://boards.straightdope.com/u/handy)\
**Post date:** [March 14, 2001, 3:36pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/11 "2001-03-14T15:36:19Z")

</div>

-Disable cookies

Isn’t that the same thing Kansas Man?

---

<div class="post-metadata">

**Author:** ![Kansas\_Man](https://avatars.discourse-cdn.com/v4/letter/k/eada6e/32.png) [@Kansas\_Man](https://boards.straightdope.com/u/Kansas_Man)\
**Post date:** [March 14, 2001, 4:12pm UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/12 "2001-03-14T16:12:43Z")

</div>

> [@](#):
>
> \*Originally posted by handy \*  
> \*\*-Disable cookies
> 
> Isn’t that the same thing Kansas Man? \*\*

Okay, I think I misunderstood what you wrote. I know that I can prevent websites from **sending** me cookies. That appears to be what you had also said.

I misunderstood, however, and thought you meant that you could monitor (and prevent) cookie information from being sent **back** to the website. That sounded cool, but, alas, I guess it don’t exists w/o completely turning off cookies reception.

---

<div class="post-metadata">

**Author:** ![handy](https://avatars.discourse-cdn.com/v4/letter/h/b5a626/32.png) [@handy](https://boards.straightdope.com/u/handy)\
**Post date:** [March 15, 2001, 2:32am UTC](https://boards.straightdope.com/t/hide-from-cookies-question/57808/13 "2001-03-15T02:32:45Z")

</div>

I input ‘cookies’ there at [download.com](http://download.com) & there are tons of programs but I don’t know about any that would change your identity.
