Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Average amount cookies for 10.6.8

How much average cookies do you pick up on Snow leopard? I have between 60-170 if I don't clear them. I have JavaScript turned off and block all cookies on.

I know Safari 5.1.1 hasn been patched for years.

iMac (20-inch Early 2009), Mac OS X (10.6.8), None

Posted on Apr 7, 2016 4:56 PM

Reply
Question marked as Best reply

Posted on Apr 7, 2016 9:04 PM

Snow Leopard gives you exactly zero cookies. They are just not relevant for the OS.


Instead, cookies are related to web sites that you visit, and completely devoid of OS version. Visiting the same set of web sites (with similar browser settings to accept and/or deny cookies) will give you the same number of cookies whether you're on Snow Leopard, El Capitan, Windows, Linux, or any other OS yu care to run.


What's your concern with the number of cookies in your browser?


(just as a point of reference, Safari tells me I have cookies from 5,173 sites, and I don't care one iota)

10 replies
Question marked as Best reply

Apr 7, 2016 9:04 PM in response to Guest_9

Snow Leopard gives you exactly zero cookies. They are just not relevant for the OS.


Instead, cookies are related to web sites that you visit, and completely devoid of OS version. Visiting the same set of web sites (with similar browser settings to accept and/or deny cookies) will give you the same number of cookies whether you're on Snow Leopard, El Capitan, Windows, Linux, or any other OS yu care to run.


What's your concern with the number of cookies in your browser?


(just as a point of reference, Safari tells me I have cookies from 5,173 sites, and I don't care one iota)

Apr 18, 2016 1:19 PM in response to Guest_9

MUCH MORE IMPORTANT than how many cookies: you should stop using Safari for Snow Leopard. It is a huge security risk. Hasn't been updated for security vulnerabilities in years.


Get Firefox instead. For the time being, it continues to be updated. Currently at version 45, but when it hits 46, those on 10.6 through 10.8 will be switched to the 45 ESR, which may give you around another year. (No more Chrome for Snow also.)

Apr 23, 2016 12:19 PM in response to Guest_9

To have an idea of the risks of using an outdated browser, have a look through the following for vulnerabilities subsequently patched in Safari and WebKit (the underlying Safari rendering engine) since the last 5.1.1 release. I still run Mountain Lion, no longer supported by Apple since near the end of 2015 (much more recent than Snow Leopard) and I wouldn't dream of using Safari 6.2.8 there any longer--in fact, I've completely removed it from the Dock.


Apple security updates - Apple Support

Apple security updates (2014) - Apple Support

Apple security updates (2013) - Apple Support

Apple security updates (2011 to 2012) - Apple Support


All you'd have to do is hit a site that has been hacked and it might be game over. You'd never know it, except when you find out at some point that your banking and credit card, or other sensitive data, has been lifted. Many of these exploits describe your machine being compromised and taken over completely.


You could, if you like, scan for known Mac trojans with https://www.malwarebytes.org/antimalware/mac/ but getting back a negative will prove little, since a browser exploit that proceeded by way of one of these vulnerabilities might not install a trojan. You may not have been hit with anything, yet, but best to just stop using Safari immediately.


In addition to the risks of using a browser that hasn't been patched for vulnerabilities in many years, there are these two major exploits for Snow Leopard which Apple patched in 10.8 and above, but never patched for Snow.


http://www.zdnet.com/article/major-ntp-security-holes-appears-and-are-being-expl oited/


http://www.zdnet.com/article/first-attacks-using-shellshock-bash-bug-discovered/

Apr 23, 2016 12:31 PM in response to WZZZ

Just one, for example.


WebKit


Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10.1


Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

About the security content of Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1 - Apple Support

"arbitrary code execution"is tech-speak for an attacker taking over your computer and doing whatever they want with it.


It is the most powerful effect a bug can have because it allows an attacker to completely take over the vulnerable process.

Running with JavaScript disabled may mitigate some of these vulnerabilities, but I wouldn't bet the ranch on it. Also, many web pages will not run properly unless it is enabled.


Also, a MUST, make certain that Java (not to be confused with JavaScript) is disabled, even for Firefox.

Apr 23, 2016 12:27 PM in response to Guest_9

If you haven't looked at Top Sites - do so - edit out any you do not want to be top sites - because they refresh - and any site you visit more than once gets added all on its own.


If you delete the cookies and web data without clearing top sites - they just come back.


THis is also true with RSS pages --


The malware could come if something that the OS added to your top sites on its own - is a URL that has been taken over by bad people.

Apr 23, 2016 1:50 PM in response to WZZZ

Patches here for the two serious Snow Leopard vulnerabilities I linked to above from flatsixracer. I did the Bash/Shellshock patch from somewhere else, but I personally ran the NTP one, which checked out OK and worked perfectly, and I have no reason to distrust the Bash/Shellshock patch. Should also be just fine. He put it up a few years ago, great that it's still available.


https://drive.google.com/folderview?id=0BxQCbeIgpA2uVjFiN1h4bGZNQ2c&usp=sharing

Average amount cookies for 10.6.8

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.