An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Page 1 of 3 1 2 3 >
Topic Options
#42649 - 11/08/16 11:22 AM Rogue Cookie
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
I keep a close eye on cookies, removing unwanted ones on a regular basis. One cookie pops up periodically even though I don't go to the site. It is trumpgolfscotland.com

I did go to that site a few months back but haven't been there either before or since. Why would the cookie appear in the absence of a visit to the site?
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42650 - 11/08/16 11:37 AM Re: Rogue Cookie [Re: ryck]
jchuzi Online


Registered: 08/04/09
Loc: New York State
If you are using Safari, go to Safari > Preferences > Cookies. Which option for Cookies and Website Data is selected?
_________________________
Jon

OS 10.14.3, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P600, Photoshop CC, Lightroom CC, MS Office 365

Top
#42657 - 11/08/16 01:43 PM Re: Rogue Cookie [Re: jchuzi]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
I'm Mountain Lion, so getting to Cookies is Safari > Preferences > Privacy > Cookies and other website data, so I assume that's what you want me to view. In that window I have:

For: Block cookies and other website data I have selected From third parties and advertisers

For: Limit website access to location services I have selected Prompt for each website each day

Nothing is selected for the other two options "Website tracking" and "Smart Search Field"


Edited by ryck (11/08/16 01:44 PM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42658 - 11/08/16 01:59 PM Re: Rogue Cookie [Re: ryck]
artie505 Online


Registered: 08/04/09
I've read about "persistent cookies", which are extremely difficult, if not impossible, to get rid of, and it's totally likely that an anus like Trump would use them.

I remember the discussion about the golf course, but I've got no idea if I visited trumpgolfscotland.com, and although I'd love to experiment, I'm not the least bit inclined to take the risk.
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#42660 - 11/08/16 02:06 PM Re: Rogue Cookie [Re: artie505]
grelber Offline


Registered: 08/05/09
Loc: North of 49th ||
Very often there's a related but not-at-all-obvious cookie in your cookie list. The simplest way to rule that out is to delete all cookies, but that might make other things untoward. I usually go through mine and remove anything that seems not to belong.
Another possibility is that your web cache has a beacon or some other nasty embedded. So you might wish to clear your web cache completely.
See if any of that helps.

Top
#42682 - 11/09/16 09:06 AM Re: Rogue Cookie [Re: ryck]
Virtual1 Offline


Registered: 08/04/09
Loc: Iowa
flash seems to be the main culprit of super cookies. dig them out yourself:
~/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/
_________________________
I work for the Department of Redundancy Department

Top
#42684 - 11/09/16 09:32 AM Re: Rogue Cookie [Re: Virtual1]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: Virtual1
~/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/

I tried that path but there doesn't appear to be anything Macromedia. I did a Spotlight search and it said there is a Macromedia folder in the Internet Plug-Ins folder.

But, when I looked there…no Macromedia folder.

I tried the same search after using Cocktail to Show Invisibles, but no luck.

Note: The Flash Plug-In is disabled.


Edited by ryck (11/09/16 09:33 AM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42687 - 11/09/16 11:17 AM Re: Rogue Cookie [Re: ryck]
MacManiac Online

Moderator

Registered: 08/04/09
Loc: Paradise....on the central Ore...
Maybe in the main Library for all users?

/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/

(not the Library in your user folder)
_________________________
Freedom is never free....thank a Service member today.

Top
#42692 - 11/09/16 01:52 PM Re: Rogue Cookie [Re: MacManiac]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: MacManiac
Maybe in the main Library for all users?

I thought about that but can't find one. The only library under Users is one attached to a user who is a periodic user (a daughter when she visits).

I also opened CleanApp and it didn't list anything named Macromedia. Neither did an EasyFind search.

Maybe Trump is getting even for all the stuff I said in The Lounge. grin


Edited by ryck (11/09/16 01:55 PM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42693 - 11/09/16 01:57 PM Re: Rogue Cookie [Re: ryck]
artie505 Online


Registered: 08/04/09
Originally Posted By: ryck
The only library under Users is one attached to a user who is a periodic user (a daughter when she visits).

There's got to be a second ~/Library...YOUR OWN.

For what it's worth, I've got the folder V1 referenced, /Users/artie/Library/Preferences/Macromedia
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#42694 - 11/09/16 02:58 PM Re: Rogue Cookie [Re: artie505]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: artie505
There's got to be a second ~/Library...YOUR OWN.

Nope. That's what I thought. In the Users folder, rather than a folder with my name, there's a picture of a house (Home?) with my name….along with Folders that have other Users' names. Clicking on the House reveals these folders:

Applications
Desktop
Documents
Downloads
Dropbox
Magazines
Microsoft User Data
Movies
Music
Pictures
Public
Sites

There is nothing named Macromedia in any of them.


Edited by ryck (11/09/16 03:03 PM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42695 - 11/09/16 03:08 PM Re: Rogue Cookie [Re: ryck]
artie505 Online


Registered: 08/04/09
The little house with your name is your User folder, but Mt. Lion is one of the versions of OS X in which ~/Library is hidden, so you may have to make it visible to find V1's referenced folder.


Edited by artie505 (11/09/16 03:12 PM)
Edit Reason: Add link
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#42696 - 11/09/16 03:27 PM Re: Rogue Cookie [Re: artie505]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: artie505
...you may have to make it visible to find V1's referenced folder.

That did it, and I found the Macromedia folder….but nothing it it that would indicate trumpgolfscotland.
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42697 - 11/09/16 03:41 PM Re: Rogue Cookie [Re: ryck]
artie505 Online


Registered: 08/04/09
Originally Posted By: ryck
Originally Posted By: artie505
...you may have to make it visible to find V1's referenced folder.

That did it, and I found the Macromedia folder….but nothing it it that would indicate trumpgolfscotland.

V1's referenced path was /Users/ryck/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/

In my installation, that folder contains a file named settings.sol, which stores your Flash prefs (as set in your pref pane in System Prefs).

If you've got anything else in that folder, delete it; if not take a look in settings.sol and see if anything looks off.

My recollection is that the type of cookies we're talking about can be stored in an assortment of different locations, so if you've actually got one it may not be where you're looking.

Have you tried searching for trumpgolfscotland, either as a separate file or as contents?
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#42698 - 11/10/16 01:55 AM Re: Rogue Cookie [Re: artie505]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: artie505
V1's referenced path was /Users/ryck/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/

Going to the end of that search, I do find a Sys Folder with a document called settings.sol It is the only document in the folder, however I am unable to open it.

Originally Posted By: artie505
Have you tried searching for trumpgolfscotland, either as a separate file or as contents?

Yes, I searched using Spotlight but it didn't generate any results.

Note: In the Preferences folder there are some peculiarly-named folders, all of which are empty.

$¨w‰è“c
4ó‰èrb
ϧ‰èrb (3 of these)
îë‰èrb (2 of these)
ú¨‰èrb (3 of these)

I mention these in case they are a source of odd behaviour.


Edited by ryck (11/10/16 01:58 AM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42699 - 11/10/16 02:07 AM Re: Rogue Cookie [Re: ryck]
artie505 Online


Registered: 08/04/09
Originally Posted By: ryck
Originally Posted By: artie505
V1's referenced path was /Users/ryck/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/

Going to the end of that search, I do find a Sys Folder with a document called settings.sol It is the only document in the folder, however I am unable to open it.

Mine opened in TextEdit.

Originally Posted By: ryck
Note: In the Preferences folder there are some peculiarly-named folders, all of which are empty.

$¨w‰è“c
4ó‰èrb
ϧ‰èrb (3 of these)
îë‰èrb (2 of these)
ú¨‰èrb (3 of these)

I mention these in case they are a source of odd behaviour.

I routinely delte stuff like that. An empty folder, in particular, with a name like that is most likely a meaningless artifact.
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#42702 - 11/10/16 05:03 AM Re: Rogue Cookie [Re: ryck]
Virtual1 Offline


Registered: 08/04/09
Loc: Iowa
Originally Posted By: ryck
Note: In the Preferences folder there are some peculiarly-named folders, all of which are empty.

$¨w‰è“c
4ó‰èrb
ϧ‰èrb (3 of these)
îë‰èrb (2 of these)
ú¨‰èrb (3 of these)

I mention these in case they are a source of odd behaviour.

That is hard drive directory corruption. Run disk utility and verify the disk. There may be actual data damage that cannot be repaired without a reinstall.

Quote:
I routinely delte stuff like that. An empty folder, in particular, with a name like that is most likely a meaningless artifact.

That's kinda scary!
_________________________
I work for the Department of Redundancy Department

Top
#42709 - 11/10/16 07:01 AM Re: Rogue Cookie [Re: artie505]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: ryck
Going to the end of that search, I do find a Sys Folder with a document called settings.sol It is the only document in the folder, however I am unable to open it.

Originally Posted By: artie505
Mine opened in TextEdit.

As did mine....thanks for the tip. However, it didn't yield anything that would indicate the trumpgolfscotland cookie…..at least to my untrained eye.


øÙTCSO
settingsautoUpdateInterval@crossdomainAllow
safefullscreenwindowlessDisablecrossdomainAlwaysautoUpdateDisableddisallowP2PUplink
defaultalwaysautoUpdateDefaultUpdatedsecureCrossDomainCacheSizeødefaultmicrophone
echosuppressionallowThirdPartyLSOAccess
domains
trustedPaths autoUpdateLastCheckBuį]€æ
defaultcameraauthorizedFeaturesExpiry
gain@I
defaultklimit@Y


Edited by ryck (11/10/16 07:01 AM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42711 - 11/10/16 07:26 AM Re: Rogue Cookie [Re: Virtual1]
artie505 Online


Registered: 08/04/09
Originally Posted By: Virtual1
Originally Posted By: ryck
Note: In the Preferences folder there are some peculiarly-named folders, all of which are empty.

$¨w‰è“c
4ó‰èrb
ϧ‰èrb (3 of these)
îë‰èrb (2 of these)
ú¨‰èrb (3 of these)

I mention these in case they are a source of odd behaviour.

That is hard drive directory corruption. Run disk utility and verify the disk. There may be actual data damage that cannot be repaired without a reinstall.

Quote:
I routinely delte stuff like that. An empty folder, in particular, with a name like that is most likely a meaningless artifact.

That's kinda scary!

I'll keep your comment in mind, but over the years I've found any number of oddly named items (I can't say whether they were files, folders, or some and some.) in ~/Library/Preferences after restarting, and I've trashed them with no repercussions.

Is there some particular aspect of ryck's items that flags them?
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#42712 - 11/10/16 07:27 AM Re: Rogue Cookie [Re: Virtual1]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: ryck
In the Preferences folder there are some peculiarly-named folders, all of which are empty.

$¨w‰è“c
4ó‰èrb
ϧ‰èrb (3 of these)
îë‰èrb (2 of these)
ú¨‰èrb (3 of these)

I mention these in case they are a source of odd behaviour.

Originally Posted By: Virtual1
That is hard drive directory corruption. Run disk utility and verify the disk. There may be actual data damage that cannot be repaired without a reinstall.

I ran two verifications, the Partition Map and the Volume but both came up with "appears to be OK".

Could those oddball folders be some frick and frack from a previously unadvisable installation that's since been removed?

Could the two "appears to be okay" results be because I did a DiskWarrior directory rebuild about a week ago?


Edited by ryck (11/10/16 07:29 AM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42714 - 11/10/16 07:31 AM Re: Rogue Cookie [Re: ryck]
artie505 Online


Registered: 08/04/09
Originally Posted By: ryck
Originally Posted By: ryck
Going to the end of that search, I do find a Sys Folder with a document called settings.sol It is the only document in the folder, however I am unable to open it.

Originally Posted By: artie505
Mine opened in TextEdit.

As did mine....thanks for the tip. However, it didn't yield anything that would indicate the trumpgolfscotland cookie…..at least to my untrained eye.


øÙTCSO
settingsautoUpdateInterval@crossdomainAllow
safefullscreenwindowlessDisablecrossdomainAlwaysautoUpdateDisableddisallowP2PUplink
defaultalwaysautoUpdateDefaultUpdatedsecureCrossDomainCacheSizeødefaultmicrophone
echosuppressionallowThirdPartyLSOAccess
domains
trustedPaths autoUpdateLastCheckBuį]€æ
defaultcameraauthorizedFeaturesExpiry
gain@I
defaultklimit@Y

Your contents are along the same lines as mine, and I think it's all stuff that belongs in there.
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#42715 - 11/10/16 07:34 AM Re: Rogue Cookie [Re: ryck]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Good morning Moderators:

I appear to have hijacked my own thread at Post 42698. Maybe this past chunk should be moved with a new title "Frick and Frack Folders".

Or we could sell this thread as "Read this thread and get a bonus opinion" blush wink


Edited by ryck (11/10/16 07:34 AM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42787 - 11/18/16 10:32 AM Re: Rogue Cookie [Re: ryck]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: ryck
I keep a close eye on cookies, removing unwanted ones on a regular basis. One cookie pops up periodically even though I don't go to the site. It is trumpgolfscotland.com

So, it appears this may be more of a "Trump" thing than I thought. Today I had a cookie trumpmiami dot com. I visited that site Nov 12 and cleared the cookie from my machine immediately after. Now, it pops up again.
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42951 - 11/30/16 08:11 AM Re: Rogue Cookie [Re: ryck]
ryck Online


Registered: 08/04/09
Loc: Okanagan Valley
Originally Posted By: ryck
So, it appears this may be more of a "Trump" thing than I thought. Today I had a cookie trumpmiami dot com. I visited that site Nov 12 and cleared the cookie from my machine immediately after. Now, it pops up again.

Or it may be something else….something nefarious that people such as Trump use to their advantage. I heard about a program called "Cookie" in another thread, so I went to a reviewer's site to learn about the software and, in their description of Cookie's functions, they mentioned:

"Then you’re asked if you’d like Cookie to clear the browser cache, in order to remove EverCookies.

These are the persistent cookies that have been designed to automatically respawn themselves from various secret caches, so that even when you do manually try to delete cookies from each browser, you’ll often see them reinstall themselves later."


So, I then went to Wikipedia and found:

"Samy Kamkar released v0.4 beta of the Evercookie on September 13, 2010, as open source.[9][10][11] According to the project's website: Evercookie is designed to make persistent data just that, persistent. By storing the same data in several locations that a client can access, if any of the data is ever lost (for example, by clearing cookies), the data can be recovered and then reset and reused.

Simply think of it as cookies that just won't go away.

Evercookie is a javascript API available that produces extremely persistent cookies in a browser. Its goal is to identify a client even after they've removed standard cookies, Flash cookies (Local Shared Objects or LSOs), and others.

Evercookie accomplishes this by storing the cookie data in several types of storage mechanisms that are available on the local browser. Additionally, if Evercookie has found the user has removed any of the types of cookies in question, it recreates them using each mechanism available."


….looks like I'll be buying "Cookie".


Edited by ryck (11/30/16 10:38 AM)
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Super Duper on 500GB OWC Mercury OTG Pro

Top
#42953 - 11/30/16 08:44 AM Re: Rogue Cookie [Re: ryck]
artie505 Online


Registered: 08/04/09
Originally Posted By: ryck
Then you’re asked if you’d like Cookie to clear the browser cache, in order to remove EverCookies.

I've been running Cookie for years, and although I think I remember that, I can't find it now; where did you see it?

Let us know how you make out.
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
Page 1 of 3 1 2 3 >

Moderator:  alternaut, dianne, MacManiac