HackMySelf: Decrypting Cookies to Show the Theft of Personal Data in University Students

Cookies have a dual purpose: to enhance user experience and to pose potential privacy and security risks. This study introduces and evaluates a teaching method for stealing personal data through cookies, called HackMySelf. The method aims to decrypt cookies via a computer security challenge posed to university students. The study found that students were able to decrypt their cookies without compromising their privacy or sharing their data. Additionally, they discovered the decryption keys in the same directory on their personal computer where their cookies were stored, emphasizing the importance of periodically deleting cookies to mitigate risks. Assessment of students’ knowledge through statistical analysis revealed an overall expected score of 18.36/20, indicating substantial proficiency despite some deficiencies in performance assessed over one semester. The study highlights the critical link between cybersecurity awareness, practical cookie management skills, and the mitigation of potential threats.