Bugtraq mailing list archives

macromedia flash mx bypasses cookie settings


From: jelmer <jkuperus () xs1 xs4all nl>
Date: Mon, 7 Oct 2002 18:42:00 +0200 (CEST)

So you want to browse anonymously

- You have disabled cookies

- You have disabled the media player ID
(http://www.computerbytesman.com/privacy/supercookie.htm)

- and you have disallowed storing of userData on your pc
(http://news.com.com/2100-1023-245556.html?legacy=cnet&tag=st.ne.1002.tgif.ni)

And you feel you are safe..but your not because then there is flash mx..

here's a little snippet taken from
http://www.macromedia.com/support/flashplayer/help/localinfo/#1_4

<snip>
When Macromedia Flash content is being played, the settings you choose for
the Flash Player are used in place of options you may have set in your
browser. That is, even if you have specified in your browser settings that
you do not want cookies placed on your computer
</snip>


There really isn't any point in implementing p3p in internet explorer when
92% of the webs users are able to
view flash content wich totally disregards all of these settings



Current thread: