Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

One year (or more) ago flash cookies were really a problem, because they could not be deleted from within a browser. They were not managed by the browser but by the flash player. Flash cookies were able to "respawn and recreate" deleted HTTP-cookies.

Is the flash cookie problem nowadays solved? Clearing your cashe and deleting your http cookies within your Chrome, IE, Firefox, etc would also delete flash cookies?

share|improve this question

2 Answers 2

up vote 2 down vote accepted

As reported here (04/16/2011), it's now easy to delete flash cookies as browser cookies :

The "Flash cookies", also known as local shared objects, can now be deleted through users' browser settings'.

And this, since the v10.3 of Adobe Flash Player. (see the release notes)

share|improve this answer
    
i also read threatpost.com/en_us/blogs/… but was not sure what the actual status is. –  Gero May 14 '12 at 9:14
    
I believe it's now sure, but I won't assume this for people using an old flash player (before 10.3). –  Cyril N. May 14 '12 at 9:20

While "flash cookies" might be easy to clear as cx42net noted above, there are also other techniques that can be used to store hard-to-delete cookie-like data and read it from the server side.

Take a look at evercookie for reference. I've seen this used in relatively high profile e-commerce and content sites.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.