this post was submitted on 18 Aug 2024
24 points (90.0% liked)

Firefox

17302 readers
785 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
 

I've enabled "Delete cookies and site data when Firefox is closed" but while all cookies gets deleted, some random site data does not. Are my settings wrong, is this a bug, and what even is that data?

Additional Info: I use RFP, want to keep browsing history and site settings. Thank you very much.

top 9 comments
sorted by: hot top controversial new old
[–] viking@infosec.pub 9 points 1 month ago (1 children)

That could simply be the cookies.txt file with no content whatsoever.

[–] knightly@hexbear.net 5 points 1 month ago* (last edited 1 month ago)

Firefox stores cookies in a DB file called cookies.sqlite, i just cleared cookies on a fresh new Firefox profile and the file is 524.3kB. A text dump of the file has four lines of text that describe the structure of the cookie database and that's it. No actual content.

[–] HarriPotero@lemmy.world 8 points 1 month ago

Sounds like it's localStorage. But I'd expect that to be covered by "site data" in that option.

It's a bit like cookies, but just for one site. Some think they can avoid cookie consent banners with localStorage.

Firefox has a page on the topic.

[–] MangoPenguin@lemmy.blahaj.zone 5 points 1 month ago (1 children)

What is the data it's keeping? 25-100 bytes doesn't seem like there's anything actually there.

[–] tacticalsugar@lemmy.blahaj.zone 1 points 1 month ago* (last edited 1 month ago) (2 children)

8 bytes is enough to store 18,446,744,073,709,551,616 (18 quintillion) different values, more than enough space for a fingerprint ID. The size of the data shouldn't factor into the potential threat.

[–] MangoPenguin@lemmy.blahaj.zone 4 points 1 month ago (1 children)

Oh for sure, I just wonder if the size being the same on 2 of them is a result of Firefox storing some default data there on cleanup by accident.

[–] tacticalsugar@lemmy.blahaj.zone 2 points 1 month ago

Oh, I get it now! In my sleep deprived state I missed that two of them had the same size. That seems like a reasonable guess, I'm just paranoid about cookies :P

[–] 30p87@feddit.org 2 points 1 month ago (1 children)

Except the actual content is very likely boilerplate stuff.

[–] tacticalsugar@lemmy.blahaj.zone 7 points 1 month ago

My point still stands. The size of data says nothing about its contents. If OP is concerned about this from a security or privacy perspective, you shouldn't be writing them off because it's only 100 bytes.