Quote:
Originally Posted by mark777
If they were not forging cookies in other domains once they had obtained your UID from the previous cookie drop, they couldn't profile all pages.
Unless they linked UID to IP?
I'm not sure how relevant Dr Claytons report would be to the version used in the 2006 trial, but I can't see how it could work without forging cookies or using IP.
EDIT : Was IP classified as PII in 2006?
|
I agree that it is entirely possible they were forging cookies. Were the UID's linked to an ip address? I couldn't say, and I'm not sure if IP's were classed as PII back then. Given the nature of cookies being tied to the domains they are assigned from I don't think that part of the model would have changed (at least not much).
It's just that as I was typing that post and trying to imagine the process involved a couple of things occured to me and I wanted to refresh my memory on the use of cookies.