Flash cookies are a threat to privacy
13th November 2008 by David North
I’m not an overly paranoid person and think some of the people who feel the need to delete their cookies regularly are probably taking things just a little too far. If people are tracking me around the web and serving adverts I might actually be interested in - fair play to them! I have nothing to hide and nothing to worry about.
However I didn’t realise that Flash provides a much more dangerous type of cookie that really needs to be addressed.
This Local Shared Object can:
- Stay on your computer for an unlimited amount of time
- Store 100 kb of data by default, with an unlimited max
- Couldn’t be deleted by your browser
- Send previous visit information and history, by default, without your permission
The big thing I take exception to here are the last two points. Firstly I believe every technology should give the user the ability to opt out, for cookies the option to delete should be readily available even if for the most part it’s only used by a minority. But the second point is truly wrong - this kind of data should be limited as it is in other technologies such as JavaScript.
Come on Adobe just give an opt out button on the next version of Flash player or perhaps just make security settings a little easier to find for your average user?
