this post was submitted on 18 Aug 2024
22 points (89.3% liked)

Firefox

17899 readers
41 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
 

I've enabled "Delete cookies and site data when Firefox is closed" but while all cookies gets deleted, some random site data does not. Are my settings wrong, is this a bug, and what even is that data?

Additional Info: I use RFP, want to keep browsing history and site settings. Thank you very much.

top 8 comments
sorted by: hot top controversial new old
[–] HarriPotero@lemmy.world 8 points 2 months ago

Sounds like it's localStorage. But I'd expect that to be covered by "site data" in that option.

It's a bit like cookies, but just for one site. Some think they can avoid cookie consent banners with localStorage.

Firefox has a page on the topic.

[–] viking@infosec.pub 8 points 3 months ago

That could simply be the cookies.txt file with no content whatsoever.

[–] MangoPenguin@lemmy.blahaj.zone 5 points 3 months ago (1 children)

What is the data it's keeping? 25-100 bytes doesn't seem like there's anything actually there.

[–] tacticalsugar@lemmy.blahaj.zone 2 points 3 months ago* (last edited 3 months ago) (2 children)

8 bytes is enough to store 18,446,744,073,709,551,616 (18 quintillion) different values, more than enough space for a fingerprint ID. The size of the data shouldn't factor into the potential threat.

[–] MangoPenguin@lemmy.blahaj.zone 4 points 2 months ago (1 children)

Oh for sure, I just wonder if the size being the same on 2 of them is a result of Firefox storing some default data there on cleanup by accident.

[–] tacticalsugar@lemmy.blahaj.zone 2 points 2 months ago

Oh, I get it now! In my sleep deprived state I missed that two of them had the same size. That seems like a reasonable guess, I'm just paranoid about cookies :P

[–] 30p87 2 points 2 months ago (1 children)

Except the actual content is very likely boilerplate stuff.

[–] tacticalsugar@lemmy.blahaj.zone 7 points 2 months ago

My point still stands. The size of data says nothing about its contents. If OP is concerned about this from a security or privacy perspective, you shouldn't be writing them off because it's only 100 bytes.