Question

On separate occasions, privacy activist Daniel Brandt discovered that the CIA and the NSA were accidentally but illegally using these things and prompted both of them to disable it. Because the ordering of these things is not specified, a namesake “tossing” attack can send these things up a subdomain. Samy Kamkar created a persistent one of these things that recreates itself, prefixed “Ever”. In a widely breaking change in 2020, the default value for an attribute of these things switched from “None” to “Lax” on Chrome. A controversial (-5[1])Firefox extension called (*) Firesheep sniffed Wi-Fi connections to find these things. Setting the HttpOnly attribute on these things ensures (10[1])that they cannot be exfiltrated via (10[1])cross-site scripting, which would allow hackers to hijack web sessions. For 10 points, name these tiny pieces of data (10[1])that websites may store on visitors’ (10[1])browsers for tracking purposes. ■END■ (10[1])

Back to tossups