You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Cookies set to "Never" but Safari now accepts all cookies anyway

In looking closely at cookies accepted "only from sites I visit" I noticed that it actually includes a lot of third-party cookies, so I keep Preferences set to Never unless I'm accessing a site that must accept them (for example, New York Times). However, in the last few days something has changed (I don't know what that is), and now all cookies are accepted even though I have Preferences set to Never. Seems like this change coincides with the latest Safari update from a couple of days back. Is there anything I can do to stop it accepting any and every cookie? Thanks.

iMac, Mac OS X (10.6.7)

Posted on Jun 25, 2011 5:36 AM

Reply
171 replies

Jul 3, 2011 7:51 AM in response to Silkroad

To be clear, most financial-related websites I use won't let me in if cookies is set to Never (when I'm not using Private Browsing) -- that includes three credit cards and my credit union. So the code glitch we're discussing here hasn't in fact opened the flood gates to any and all cookies. Admittedly many cookies are allowed in despite Never, but not all.

Jul 6, 2011 8:04 PM in response to Silkroad

Silkroad,


As I explained, I used Safari for general browsing (with cookies set to "never") and used FireFox for sites that need cookies (such as financial sites) and have FireFox set to flush all data upon exiting. I'm now using Opera for general browsing, and will switch back to Safari when Apple fixes this. Unrelated, Opera is very useful on the iPhone, because you can turn images off, which makes pages load faster and helps keep me below the paltry 200mb data limit.

Jul 7, 2011 9:26 AM in response to Silkroad

Silkroad wrote:


My point is, I am very sure Apple knows about this (they really are the best in the business), and will fix it quickly. The fact that ME.COM is so strict about cookies is actually a good thing -- confirmation yet again of just how good Apple's code guys are.

I love my Mac, and I preferred Safari over any other browser until it started accepting cookies without my permission. I found a workaround for that---by toggling "private browsing" on and off when I first opened Safari, cookies stopped loading. But then I discovered Safari was doing other things like loading databases without asking permission.


At that point, Safari became un-usable for me because I can't be sure it won't open "safe" downloads. I can't be sure autocomplete is disabled.


I tried all the conventional fixes. I tried trashing preferences. I tried disabling extensions (AdBlock and Ghostery are the only extensions I have). I tried the Combo Update. I tried reinstalling Safari---but the download has not caught up with the recently updated operating system yet, and it won't install.


I lost confidence in Safari at that point. I got Google Chrome, and it's the default browser now, but I'm not particularly pleased with it. The support is wretched, and if I want to enjoy all the RSS feeds I had with Safari, I'll have to figure out how to use an online reader.


The problems with Safari appear to be associated with the MacDefender updates to Snow Leopard. Those updates seem to have destabilized the operating system just a tad. But in all honesty, I'm a little dismayed about it, and I've run out of time to troubleshoot.


I used the "report bugs" feature on Safari to report the problems I know I'm having with Safari, and I hope there will be an update soon to address Safari's instability.

Jul 12, 2011 1:01 AM in response to Silkroad

Same thing here. Many cookies appearing even though I have the Accept Cookies preference set to "Never". Sites that used to require me to switch to "Only from sites I visit" now will will work with "Never". I've tried all the tricks mentioned to no avail, loosing all myURL favicons in the process of resetting Safari. The only thing that sort of works is toggling Private Browsing on/off at a Safari start up to a blank page. I sent Apple a bug report (from the Safari menu) but did not get any feedback of any kind. Waiting for the next Safari update or will we all have to transition to Lion before this is fixed?

Jul 20, 2011 9:27 AM in response to Silkroad

Some of you are describing issues that aren't true in my case -- through trial and error, I found that I could avoid unwanted cookies by setting Safari to NEVER *plus* invoking Private Browsing. When I do that, no cookies are saved. For financial sites, in particular my credit union, if I try to log in using NEVER+Private Browsing, the site blocks my login, and forces me to re-register my computer before allowing any further activity.


That is, if you want to block cookies, set Safari to NEVER plus Private Browsing.


Note that we can be certain Apple is aware of this issue by posting to apple.com/feedback and also Report Bugs to Apple on Safari menu.

Jul 20, 2011 9:36 AM in response to Silkroad

I am aware that setting Safari to "Private" mode blocks acceptance of cookies from web sites. But this is a coarse remedy in that visited sites are also blocked from Safai's History database.


I notified Apple of this Safari defect several weeks ago. So far, I have not seen a fix. The problem emerged with the 10.6.8 OS update. So, it might be related to the operating system rather than the Safari application.

Jul 20, 2011 11:31 AM in response to James Shea1

Every time I open Safari, I discover another useless setting. RSS articles update on their own, cookies are set from places I've never visited, databases are loaded without permission---and now I discover Google Safe Browsing service isn't working. It hasn't been updated in 9 days.


So today, I tried installing Safari 5.1 to see if that might resolve something. It did not help. It is no better---it 's actually a little worse. Now toggling private browsing doesn't do a thing. So I can either accept all cookies (and who knows what else) or use private browsing.


That is unacceptable. It's also a possible security risk.


I'm hopeful (but in no way sure) someone at Apple is aware of the problem, but as things stand now, Google Chrome is the best answer for me.

Jul 21, 2011 7:05 AM in response to Silkroad

DISTURBING UPDATE


Last night Software Update notified me of new Safari version, which I downloaded and installed. Note that I'd been scrupulous about watching cookies (on a different thread, a poster accused me of being paranoid, and told me I should not worry about cookies -- but I guess it depends on your definition of "security." I, for one, don't like being watched, for whatever the reason). After the Safari install, I checked to see what had changed, and noticed you can now check a box to block cookies "from third parties and advertisers." So I did. Then I looked at cookies -- surprise, third-party and advertiser cookies are there, along with others. Then I checked "Always" block cookies -- same result, many many cookies. I mean *MANY COOKIES*. Then I tried invoking "Private Browsing" which results in my not being allowed to even look at sites I'm currently logged into. That is, this software fix seems to make it worse.


Sorry to say, I'll be using Firefox for the foreseeable future, until I learn that the Safari issues have been addressed.


Sure do hope Apple can figure this out quickly.

Jul 21, 2011 7:37 AM in response to Silkroad

Follow-up: I wasn't clear in the above post.


Using setting to "Always" block cookies, not only did Safari accept many cookies, but in fact lots of them were from new sources -- cookies I'd never seen before. Safari now accepts everything thrown at it, no matter which setting you've chosen.


So I deleted all cookies, shut down Safari, and restarted it. Before I'd done anything (that is, I hadn't navigated to a single website), I checked cookies and saw many cookies, from sites like doubleclick and lots of others I've never heard of. To be clear, this was significantly more cookies than before. This was while Safari was set to "Always" block cookies.


Plus, it showed the cookies I'd just deleted before closing out Safari. When I started it up again, those cookies had reappeared -- as though they'd been there all along, as though my deleting them made no difference. They just won't go away.

Jul 22, 2011 7:41 PM in response to Silkroad

Yeah, it's only been a month and there have been about 3 fixes that don't work at all.....

But i'm sure they'll figure it out within the next 6 months or so.

Now all they have to do is figure out a way to stop adobe, quicken, and microsoft word products from being compromised because they wanted to bring back the App Launcher from 12 years ago in the new OS X Lion.

Cookies set to "Never" but Safari now accepts all cookies anyway

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.