CookieTin Extension Manages Partitioned Cookies Across Firefox, Chrome and Edge
Modern browsers isolate cookies to prevent cross-site tracking, yet many cookie managers still miss a growing category of these isolated entries. Partitioned cookies appear when Firefox enables Total Cookie Protection by default or when sites mark cookies with the Partitioned attribute under Chrome’s CHIPS proposal.
In both cases the WebExtensions API returns an extra partitionKey object containing the top-level site. Without explicitly passing an empty partitionKey to cookies.getAll(), these entries simply do not appear in results, and the same problem affects cookies.remove().
CookieTin solves the issue with a unified retrieval function that first tries the partitioned query, falls back gracefully on older Chromium builds, and also sets firstPartyDomain: null on Firefox to surface First-Party Isolation cookies. The extension’s uniqueness key therefore includes storeId, domain, path, name, firstPartyDomain and the full partitionKey tuple.
When editing cookies the extension enforces several browser-specific rules before calling cookies.set(). Host-only cookies must omit the domain field entirely; otherwise the browser creates a wildcard entry for subdomains. Firefox rejects the value “unspecified” for sameSite, so the field is simply omitted. Cookies carrying the __Host- prefix, SameSite=None without Secure, or an expiration date in the past are rejected with a human-readable explanation.
Export to the classic cookies.txt format now correctly distinguishes TRUE/FALSE from the lowercase true/false produced by the old Cookie Quick Manager. The importer recognises both variants by case so that yt-dlp and similar tools receive accurate files.
Protected cookies receive special treatment: an onChanged listener restores them if they are removed with cause “explicit”. The listener deliberately ignores expired or overwritten cookies. All functionality is delivered in a single Manifest V3 codebase that runs on Firefox (including Android), Chrome and Edge, with browser-specific storage identifiers and alarm scheduling hidden behind abstraction layers.
Comprehensive Puppeteer-based E2E tests create ordinary, HttpOnly and partitioned cookies, open the manager UI, and verify listing, deletion, editing and round-trip export/import. An additional upgrade test installs the last public release of Cookie Quick Manager, adds protected cookies, then updates to CookieTin and confirms settings migration.
Related articles
Kaspersky Premium for macOS Gains App Uninstall Feature to Remove Residual Files
Kaspersky Premium now includes an App Uninstall tool for macOS that locates and deletes leftover files such as caches, cookies, settings, and logs after applications are removed. The feature also identifies duplicate copies of programs and lets users remove all instances or select specific ones while preserving shared components used by other software. Survey data from Kaspersky shows that only 44 percent of macOS users delete unused applications, even though 56 percent regularly clear browser data and 54 percent remove unwanted media files. Residual files can contain sensitive information including account tokens, passwords, IP addresses, event logs, and personal documents, creating privacy risks especially when a device is sold or accessed by unauthorized parties. Deleted files can be restored from the trash or directly within Kaspersky Premium before the application session ends. The company also warns that malicious programs are frequently disguised as legitimate macOS cleaning utilities.
Bypassing VPN Detection on iPhone: Detailed Methods to Avoid App Blocks
Many iPhone users encounter apps that detect and block active VPN connections even after switching servers or protocols. The detection often occurs locally on the device by inspecting network interfaces rather than relying solely on external IP addresses. This guide explains how apps identify VPN tunnels through iOS network data and provides practical workarounds including moving the VPN to a router, configuring per-app exclusions, and using web versions of services. It also covers why protocol obfuscation and port changes fail to hide local VPN activity from applications. Additional troubleshooting addresses automatic VPN profiles, ad blockers, and iCloud Private Relay interference. The article emphasizes that no universal toggle exists in iOS to hide an active VPN from all apps.
New Obfuscation Method Dissolves Personal Data Records in Layer of Plausible Variants
A Russian information security researcher has proposed a data protection technique that renders stolen personal records unusable even after full compromise. The approach mixes real data such as phone numbers, emails, passports, addresses, INN and SNILS with vast numbers of semantically valid alternatives. Attackers receive nearly complete information including a 361-character message containing PIN codes and word order, yet lack the secret vector space and reconstruction algorithm required to identify the correct record. Without these components, brute-force attempts produce millions of plausible results with no architectural method to verify accuracy. The method is presented as an alternative to traditional encryption when data must remain accessible yet protected against extraction. A public sandbox is available for testing the approach.
Hydrat Project Builds Automated WireGuard Gateway for Resilient VLESS and Tor Routing
A developer has released Hydrat, a self-hosted gateway that connects devices via WireGuard while automatically managing VLESS and Tor backends to survive server blocks and quality degradation. The system maintains a pool of tested proxies, performs continuous health checks, and switches routes without requiring client-side profile changes. Two Go processes handle control logic and network enforcement separately, using SQLite for state and nftables plus Xray for traffic routing. TCP and UDP can be assigned independent exits, with geoip.dat support and custom rules to keep marketplace apps functional. The project emphasizes stability over direct connections and is designed for deployment on servers in Russian jurisdiction.