Understanding Supercookie: A Guide to Tracking with Favicons

May 31, 2022 | Programming

In the realm of digital privacy, tracking is a significant concern, and Supercookie introduces a new approach that utilizes favicons to assign unique identifiers to website visitors. Unlike conventional cookies that can be easily cleared, these identifiers persist even under various conditions. Let’s dive into how Supercookie operates and how to implement it.

Inspiration Behind Supercookie

Supercookie is inspired by research conducted by scientists at the University of Illinois, Chicago. The purpose of this project is primarily educational and demonstrative, aiming to raise awareness about tracking possibilities enabled by favicons. You can check the details in the full documentation.

How Does Supercookie Work?

Supercookie employs favicons—those small icons you see in your browser tabs—to track user behavior. Here’s how to think of it:

  • Imagine: You own a cafe, and you ask every customer to wear a unique badge with their favorite drink on it.
  • Every Time: A customer enters, they’ll be identified by this badge—even if they change tables, use a different entrance, or come in with a disguise.
  • Favicons: Similarly, Supercookie attaches a unique identifier to users based on their favicon interactions. This ID remains even if the user clears their browsed data.

In essence, the tracking ability of Supercookie persists even in incognito modes and isn’t erased when cache is cleared or different privacy tools are employed.

Installation Steps

Getting started with Supercookie can be achieved in two environments: Docker and your local machine.

Using Docker

  • Requirements: You need to have Docker installed.
  • Clone the repository:
  • bash
    git clone https://github.com/jonasstrehle/supercookie
  • Update the .env file in the server.env:
  • env
    HOST_MAIN=yourdomain.com #or localhost:10080
    PORT_MAIN=10080
    HOST_DEMO=demo.yourdomain.com #or localhost:10081
    PORT_DEMO=10081
  • Run the container:
  • bash
    cd supercookie/server
    docker-compose up
  • Your webserver will be live at https://yourdomain.com.

Using Local Machine

  • Requirements: Ensure that Node.js is installed.
  • Clone the repository:
  • bash
    git clone https://github.com/jonasstrehle/supercookie
  • Update the same .env file as in Docker:
  • env
    HOST_MAIN=localhost:10080
    PORT_MAIN=10080
    HOST_DEMO=localhost:10081
    PORT_DEMO=10081
  • Run the service:
  • bash
    cd supercookie/server
    node --experimental-json-modules main.js
  • Your webserver will be accessible at http://localhost:10080.

Troubleshooting

If you encounter issues during installation, consider the following troubleshooting tips:

  • Ensure that Docker or Node.js is correctly installed and functioning.
  • Double-check the .env configuration for any typos.
  • Make sure the required ports are not being used by other applications.
  • If you face connectivity issues, verify your domain configuration if hosting remotely.

For more insights, updates, or to collaborate on AI development projects, stay connected with fxis.ai.

Considering Security

Unlike other tracking methods, Supercookie remains persistent under various privacy measures. All major browsers, including Chrome, Firefox, and Safari, could potentially leverage this capability. Awareness of such tracking methods is crucial for end-users to ensure their online privacy.

At fxis.ai, we believe that such advancements are crucial for the future of AI as they enable more comprehensive and effective solutions. Our team is continually exploring new methodologies to push the envelope in artificial intelligence, ensuring that our clients benefit from the latest technological innovations.

Conclusion

Supercookie showcases how seemingly innocent aspects of web design, such as favicons, can be leveraged for tracking individuals. Understanding and mitigating these risks can drive a more privacy-conscious approach to web usage.

Stay Informed with the Newest F(x) Insights and Blogs

Tech News and Blog Highlights, Straight to Your Inbox