Local Shared Object
Template:Rewrite A Local Shared Object (LSO) is a collection of cookie-like data stored as a file on a user's computer. LSOs are used by all versions of Adobe Flash Player and Version 6 and above of Macromedia's now-obsolete Flash MX Player.[1]
Storage
Flash Players use a sandbox security model. With the default settings, Adobe Flash Player does not seek the user's permission to store LSO files on the hard disk. LSOs contain cookie-like data stored by individual web sites or domains. Indeed, as with cookies, online banks, merchants or advertisers may use LSOs for tracking purposes.[2]
The current version of Flash does not allow LSOs to be shared across domains. For example, an LSO from "www.example.com" cannot read an LSO created by the domain "www.example2.com".[3]
Privacy concerns
LSOs can be used by web sites to collect information on how people navigate those web sites even if people believe they've restricted the data collection.[4] More than half of the internet’s top websites use LSOs to track users and store information about them.[5] There is relatively little public awareness of LSOs, and they can usually not be deleted by the cookie privacy controls in a web browser.[5] This may lead a web user to believe a computer is cleared of tracking objects, when it is not.[5]
Several services even use LSOs as surreptitious data storage to reinstate traditional cookies that a user deleted, which is called 're-spawning' in homage to video games where adversaries come back to life even after being "killed," the report found. So even if a user gets rid of a website’s tracking cookie, that cookie’s unique ID will be assigned back to a new cookie again using the Flash data as the "backup." [6]
In certain countries it is illegal to track users without their knowledge and consent. For example, in the UK customers must consent to use of cookies/LSOs as defined in "Guidance on the Privacy and Electronic Communications (EC Directive) Regulations 2003" [1]...
"Cookies or similar devices must not be used unless the subscriber or user of the relevant terminal equipment:
- is provided with clear and comprehensive information about the purposes of the storage of, or access to, that information; and
- is given the opportunity to refuse the storage of, or access to, that information."
User control
Local Shared Objects are not temporary files. Users can only opt-out of Local Shared Objects globally by using the Global Storage Settings panel[7] of the online Settings Manager at Adobe's website. Users can also opt-out of them on a per-site basis by right-clicking the Flash player and selecting 'Settings'.
Adobe's online-only Website Storage Settings panel was created to let users view and delete LSOs on a per-domain basis. It is also possible to completely disallow LSOs from a specific domain by setting the storage space to "0 KB",[8] however, although no data is stored, empty directories with the name of the domain are nonetheless created. Add-on extensions have also been created for the Firefox Web browser, called Objection[9] and BetterPrivacy[10] that allow the user to view and delete LSOs.[10]
File locations
The default storage location for LSO files is operating system-dependent. LSO files are typically stored with a ".SOL" extension, within each User's directory. Note that for self-executing flash applications run on the local machine will show up as being run on a website, in the folder localhost.
- Windows XP:
- For Web sites: %APPDATA%\Macromedia\Flash Player\#SharedObjects\<random code>\<domain>\<path - maybe°>\<object name>.sol
- Other Directories Where Flash LSO (*.SOL) Files Are Found in Windows XP:
- C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\filename.sol
- C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\#SharedObjects\[alpha-numeric folder name]\filename.sol
- C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\filename.sol
- C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\[alpha-numeric folder name]\filename.sol
- C:\Documents and Settings\Owner.[Your_Owner_Name]\Application Data\Macromedia\Flash Player\#SharedObjects\[alpha-numeric folder name]\filename.sol
- C:\Documents and Settings\Owner.[Your_Owner_Name]\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\filename.sol
- C:\WINDOWS\system32\Macromed\[subdirectories]\filename.sol
- For AIR Applications: %APPDATA%\<AIR Application Reverse Domain Name>\Local Store\#SharedObjects\<flash filename>.swf\<object name>.sol
- Windows Vista and later:
- For Web sites: %APPDATA%\Roaming\Macromedia\Flash Player\#SharedObjects\<random code>\<domain>\<path - maybe°>\<object name>.sol
- For AIR Applications: unknown, likely similar to the above
- Mac OS X:
- For Web sites: ~/Library/Preferences/Macromedia/Flash Player/#SharedObjects/<random code>/<domain>/<path - maybe°>/<object name>.sol and ~/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/<object name>.sol
- For AIR Applications: ~/Library/Preferences/<AIR Application Name>/Local Store/#SharedObjects/<flash filename>.swf/<object name>.sol
- Linux/Unix:
- ~/.macromedia/Flash_Player/#SharedObjects/<random id>/<domain>/<path - maybe°>/<flash filename>.swf/<object name>.sol
° - Flash player can save the file in any path specified by the SWF developer, relative to the current domain.
Programming
The Flash Player allows Web content to read and write LSO data to the computer's local drive on a per-domain basis;[11] such data may preserve session state and record user data and behavior.[12]
By default, a Flash application may store up to 100kb of data to user's hard drive (browser cookies have a limit of just 4kb).[11] The defined storage sizes are 0kb, 10kb, 100kb, 1Mb, 10Mb, and Unlimited.[13] If the current limit is exceeded, the user is shown a dialog requesting storage space of the next size. The user may override the amount manually by clicking the Flash application with right mouse button and selecting Settings; however, this applies only to the domain of the Flash movie. If the selected setting is smaller than the current data size, the data is deleted.
Global LSO settings are not under the direct control of the user, and can only be be amended through Adobe's online "Global Settings Manager" control panel.[13][14]
Editors and toolkits
Software | Website | Developer | First public release | Latest stable version | Cost (USD) | Open source | License | Programming language |
---|---|---|---|---|---|---|---|---|
SolVE | SolVE | Darron Schall | 2004-09 | 0.2 (2004-10-15) | Free | Yes | CPL | Java |
.sol Editor | .sol Editor | Alexis Isaac | 2005-02 | 1.1.0.1 (2005-02-21) | Free | Yes | MPL | ActionScript, Delphi/Kylix |
Dojo Toolkit | Dojo Toolkit | Dojo Foundation | 2004 | 1.3.2 (2009-7-16) | Free | Yes | BSD, AFL | JavaScript |
MAXA Cookie Manager | MAXA Cookie Manager | Maxa Research | ? | 3.2 (2009-02-02) | Non-free 35 | No | proprietary | ? |
PyAMF | PyAMF | Nick Joyce | 2007-10-07 | 0.5 (2009-09-07) | Free | Yes | MIT | Python |
SOLReader | SOLReader | Alessandro Crugnola | ? | ? | Free | No | ? | C#, PHP [15] |
s2x | s2x | Aral Balkan | ? | ? | Free | Yes | ? | Python [16] |
.minerva | coursevector.com | Gabriel Mariani | ? | 3.0.0 (2010-01-07) | Free | Yes | ? | AIR |
Operating system support
Software | Windows | Mac OS X | Linux | BSD | Unix |
---|---|---|---|---|---|
SolVE | Yes | Yes | No | No | No |
.sol Editor | Yes | No | No | No | No |
Dojo Toolkit | Yes | Yes | Yes | Yes | Yes |
MAXA Cookie Manager | Yes | No | No | No | No |
PyAMF | Yes | Yes | Yes | Yes | Yes |
References
- ↑ "What are local shared objects?". Adobe. http://www.adobe.com/products/flashplayer/articles/lso/. Retrieved 2007-12-05.
- ↑ "Flash Player Worries Privacy Advocates". InformationWeek. http://www.informationweek.com/news/showArticle.jhtml?articleID=160901743. Retrieved 2007-12-05.
- ↑ "Flash Player : What Is a Local Shared Object?". Adobe. http://www.adobe.com/products/flashplayer/articles/lso/. Retrieved 2009-03-27.
- ↑ "Adobe Flash cookies pose vexing privacy questions". Networkworld. http://www.networkworld.com/news/2009/081109-study-adobe-flash-cookies-pose.html. Retrieved 2009-04-10.
- ↑ Bruce Schneier http://www.schneier.com/blog/archives/2009/08/flash_cookies.html#comments
- ↑ "Adobe - Flash Player : Settings Manager - Global Storage Settings Panel". Macromedia.com. http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager03.html. Retrieved 2009-03-27.
- ↑ "Adobe - Flash Player : Settings Manager - Website Storage Settings panel". Macromedia.com. http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html. Retrieved 2009-03-27.
- ↑ "Objection web site". http://objection.mozdev.org/. Retrieved 2007-12-05.
- ↑ 10.0 10.1 "Better Privacy web site". https://addons.mozilla.org/en-US/firefox/addon/6623. Retrieved 2009-08-26.
- ↑ 11.0 11.1 "Macromedia Flash MX Security". Adobe. 2002-03-01. http://download.macromedia.com/pub/flash/whitepapers/security.pdf. Retrieved 2007-12-05.
- ↑ "Local Shared Objects -Flash Cookies". Electronic Privacy Information Center. 2005-07-21. http://www.epic.org/privacy/cookies/flash.html. Retrieved 2007-12-05.
- ↑ 13.0 13.1 "Global settings manager". Adobe. http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html. Retrieved 2007-12-05.
- ↑ "TechNote: How to manage and delete local shared objects?". Adobe. http://www.adobe.com/go/52697ee8. Retrieved 2007-12-05.
- ↑ "PHP example with source code". Alessandro Crugnola. http://www.sephiroth.it/assets/utils/SolReader.phps. Retrieved 2007-12-18.
- ↑ "Web demo written in Python". Aral Balkan. http://icube.freezope.org/temp/util/s2x. Retrieved 2007-12-18.
External links
Find more about Local Shared Object on Wikipedia's sister projects:
Search Wikibooks Textbooks from Wikibooks
Search Wikiquote Quotations from Wikiquote
Search Wikisource Source texts from Wikisource
Search Commons Images and media from Commons
Search Wikinews News stories from Wikinews
Search Wikiversity Learning resources from Wikiversity
- "New Technique for Tracking Web Site Visitors". Slashdot. 2005-04-04. http://yro.slashdot.org/article.pl?sid=05/04/04/177238. Retrieved 2007-12-05.
- "Tracking with Flash Cookies". InformIT. 2007-10-05. http://www.informit.com/guides/content.aspx?g=security&seqNum=276. Retrieved 2007-12-05.
- How to block Flash cookies
- Electronic Privacy Information Center on "Local Shared Objects"
If you like SEOmastering Site, you can support it by - BTC: bc1qppjcl3c2cyjazy6lepmrv3fh6ke9mxs7zpfky0 , TRC20 and more...