Copyright Goodheart-Willcox Co., Inc. 48 Principles of Cybersecurity Quick Look 2.2.3 Continued 3. On the CNN Privacy Statement page, scroll down to the section entitled Cookies and Other User and Ad-Targeting Technologies. They categorize cookie use as performance and advertising. What is the difference between these cookie types? 4. What control does CNN have over third-party cookies that may be issued from its site? 5. Navigate to the About Cookies website (www.aboutcookies.org), and click the Cookie Law link. This site provides information on the “cookie law” in the United Kingdom. Because CNN can attract users from countries outside the United States, it must follow laws in those countries. What rules exist in the United Kingdom that apply to cookie use? Cookies Develop a brief presentation for faculty and staff about the purpose and potential issues of browser cookies. This presentation should describe what cookies are and how they invade privacy. Also, discuss how cookies can be used in hacking attempts. Explain how to remove cookies and how to make browser settings relevant to controlling cookies. This presentation will be given to staff that may not be computer savvy, so make sure you are writing to your intended audience. It should be informative and engaging. Case Study Session Cookies A session cookie exists only as long as the web browser is open. This type of cookie is intended to exist only while you are visiting the website. When the browser is closed, session cookies are deleted. Persistent Cookies A persistent cookie stays on your computer until an expiration date is met, as shown in Figure 2-9. Because they remain after your browser is closed, they are sometimes referred to as tracking cookies. They are called that because adware or other programs will read the cookies on your computer to record information about your browsing history and your habits. Secure Cookies A secure cookie can only be sent using an encrypted session. The data in the cookie are sent using the secure Hypertext Transfer Protocol (HTTPS). Third-Party Cookies A third-party cookie originates from a visit to a website, but references a dif- ferent website. For example, suppose you visit the news.com website. This site may create a session or persistent cookie. The page you visited on news.com displayed an ad from the computers.com website. The computers.com website may create a cookie on your computer despite the fact you never visited that site. The cookie from computers.com is a third-party cookie in this example. Super cookie! A new type of cookie was used by AT&T and Verizon Wireless against customers on their smartphones. This cookie tracks and monitors users’ browsing habits and activity, and users are unable to delete or evade them. After public outcry, AT&T revealed it will stop using super cookies, and Verizon Wireless added an opt-out option. FYI