Which one of the following statements is NOT correct about

1. A cookie is a piece of code that has the potential to compromise the security of an Internet user
2. A cookie gains entry to the user's work area through an HTTP header
3. A cookie has an expiry date and time
4. Cookies can be used to track the browsing pattern of a user at a particular site

Cookies are not Piece of code they are just strings typically in the form of key value pairs.