You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Is "private browsing" really "private"?

When using "private browsing" what is private and what is public information? I notice that when I use private browsing, the websites still seem to access and track information about my computer. Can you explain what is supposed to occur when using this feature?

Aluminum MacBook Pro, Mac OS X (10.5.5), 15/2.4/2X1GB/250/SD

Posted on Oct 19, 2010 8:43 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 19, 2010 10:11 AM

Not as private as you might think:

http://www.switchingtomac.com/tutorials/how-to-make-safaris-private-browsing-fea ture-actually-private/

http://www.insanely-great.com/news.php?id=9054

and then Apple's own advice from here: http://www.apple.com/pro/tips/privacy_safari.html

"Note that the Private Browsing option does not prevent Safari from collecting cookies (the preference files automatically generated by many websites). The Reset Safari option clears all cookies. If you want to delete only certain ones, choose Preferences from the Safari menu, click the Security tab, and then click Show Cookies. You can select and delete individual cookies from the list that appears. Careful, though — if you’re a frequent web user, this list can be very, very long."

which is itself incomplete, the relevant part being ' If you want to delete only certain ones.

To that end it is useful to have Safari Cookies installed, which is the only cookie manager available for Safari:

http://sweetpproductions.com/safaricookies/

which automatically deletes all cookies not marked as 'favourites' when closing Safari. It does the same for Flash Cookies, but they are subject for themselves:


From this website:

http://machacks.tv/2009/01/27/flushapp-flash-cookie-removal-tool-for-os-x/

For those who do not know about Flash cookies, more properly referred to as Local Shared Objects (LSO), they operate in a similar way to regular browser cookies but are stored outside the purview of your browser, meaning you cannot delete them from within your browser, whether Safari, Firefox, Opera or any other. Typically they are issued from sites or 3rd party sites that contain Adobe Flash content. Since virtually all internet advertising is delivered in Flash, Google/Doudleclick and all other internet advertising companies are sure to be tracking your browsing behavior with Flash cookies. These companies can see you traverse the Internet as you come upon the plethora of sites that contain their embedded advertising. Check out the Wikipedia entry here.

In Mac OS X they are stored in the following location:
/User’s Home Folder/Library/Preferences/Macromedia/Flash Player/#SharedObjects

The settings for the Flash cookies are stored in:
/User’s Home Folder/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys

In OS X Local Shared Objects, or Flash Cookies, are appended with a .sol suffix. Flush deletes all the Flash cookies (.sol) and their settings.

Flush can be downloaded from that page.

If you want to retain certain Flash cookies but not others, the excellent add-on for Safari called SafariCookies now includes a setting for automatically deleting flash cookies you don't want to retain, when Safari is shut down, in the same as it deals with ordinary cookies:

http://www.sweetpproductions.com/safaricookies/index.htm

which not only does that but much more equally useful stuff!

This article covers the issue in more depth:

http://www.wired.com/epicenter/2009/08/you-deleted-your-cookies-think-again/

Flash cookies are also known as 'Zombie Cookies' and are used by a number of firms, including Hulu, MTV, and Myspace. Graham Cluley, senior technology consultant at the internet security firm Sophos, told BBC News that the source of the trouble was Adobe Flash itself, which he called "one of the weirdest programs on the planet".

"I think it's highly unlikely that these large companies have abused Flash cookies - which are different from browser cookies - with malicious intent," he said.

"I think it's much more likely that the vast majority of users are simply oblivious to the bizarre way in which Adobe allows them to configure the software."

http://www.bbc.co.uk/news/technology-10787882

And a more recent article:

http://www.nytimes.com/2010/09/21/technology/21cookie.html?_r=3&scp=1&sq=flash&s t=cse
4 replies
Question marked as Top-ranking reply

Oct 19, 2010 10:11 AM in response to MacConvert54

Not as private as you might think:

http://www.switchingtomac.com/tutorials/how-to-make-safaris-private-browsing-fea ture-actually-private/

http://www.insanely-great.com/news.php?id=9054

and then Apple's own advice from here: http://www.apple.com/pro/tips/privacy_safari.html

"Note that the Private Browsing option does not prevent Safari from collecting cookies (the preference files automatically generated by many websites). The Reset Safari option clears all cookies. If you want to delete only certain ones, choose Preferences from the Safari menu, click the Security tab, and then click Show Cookies. You can select and delete individual cookies from the list that appears. Careful, though — if you’re a frequent web user, this list can be very, very long."

which is itself incomplete, the relevant part being ' If you want to delete only certain ones.

To that end it is useful to have Safari Cookies installed, which is the only cookie manager available for Safari:

http://sweetpproductions.com/safaricookies/

which automatically deletes all cookies not marked as 'favourites' when closing Safari. It does the same for Flash Cookies, but they are subject for themselves:


From this website:

http://machacks.tv/2009/01/27/flushapp-flash-cookie-removal-tool-for-os-x/

For those who do not know about Flash cookies, more properly referred to as Local Shared Objects (LSO), they operate in a similar way to regular browser cookies but are stored outside the purview of your browser, meaning you cannot delete them from within your browser, whether Safari, Firefox, Opera or any other. Typically they are issued from sites or 3rd party sites that contain Adobe Flash content. Since virtually all internet advertising is delivered in Flash, Google/Doudleclick and all other internet advertising companies are sure to be tracking your browsing behavior with Flash cookies. These companies can see you traverse the Internet as you come upon the plethora of sites that contain their embedded advertising. Check out the Wikipedia entry here.

In Mac OS X they are stored in the following location:
/User’s Home Folder/Library/Preferences/Macromedia/Flash Player/#SharedObjects

The settings for the Flash cookies are stored in:
/User’s Home Folder/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys

In OS X Local Shared Objects, or Flash Cookies, are appended with a .sol suffix. Flush deletes all the Flash cookies (.sol) and their settings.

Flush can be downloaded from that page.

If you want to retain certain Flash cookies but not others, the excellent add-on for Safari called SafariCookies now includes a setting for automatically deleting flash cookies you don't want to retain, when Safari is shut down, in the same as it deals with ordinary cookies:

http://www.sweetpproductions.com/safaricookies/index.htm

which not only does that but much more equally useful stuff!

This article covers the issue in more depth:

http://www.wired.com/epicenter/2009/08/you-deleted-your-cookies-think-again/

Flash cookies are also known as 'Zombie Cookies' and are used by a number of firms, including Hulu, MTV, and Myspace. Graham Cluley, senior technology consultant at the internet security firm Sophos, told BBC News that the source of the trouble was Adobe Flash itself, which he called "one of the weirdest programs on the planet".

"I think it's highly unlikely that these large companies have abused Flash cookies - which are different from browser cookies - with malicious intent," he said.

"I think it's much more likely that the vast majority of users are simply oblivious to the bizarre way in which Adobe allows them to configure the software."

http://www.bbc.co.uk/news/technology-10787882

And a more recent article:

http://www.nytimes.com/2010/09/21/technology/21cookie.html?_r=3&scp=1&sq=flash&s t=cse

Oct 19, 2010 11:28 AM in response to MacConvert54

Hi,

According to the dialog box when you enable Private Browsing, Safari won't remember pages you visit, search history, or Autofill. That's all it does.

There are some Safari Extensions available you might like such as Incognito available here. The plus for Extensions is that you can turn them on or off without completely uninstalling.








Carolyn 🙂

Is "private browsing" really "private"?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.