Local Shared Object

From Seo Wiki - Search Engine Optimization and Programming Languages

Jump to: navigation, search

Template:Rewrite A Local Shared Object (LSO) is a collection of cookie-like data stored as a file on a user's computer. LSOs are used by all versions of Adobe Flash Player and Version 6 and above of Macromedia's now-obsolete Flash MX Player.[1]



Flash Players use a sandbox security model. With the default settings, Adobe Flash Player does not seek the user's permission to store LSO files on the hard disk. LSOs contain cookie-like data stored by individual web sites or domains. Indeed, as with cookies, online banks, merchants or advertisers may use LSOs for tracking purposes.[2]

The current version of Flash does not allow LSOs to be shared across domains. For example, an LSO from "www.example.com" cannot read an LSO created by the domain "www.example2.com".[3]

Privacy concerns

LSOs can be used by web sites to collect information on how people navigate those web sites even if people believe they've restricted the data collection.[4] More than half of the internet’s top websites use LSOs to track users and store information about them.[5] There is relatively little public awareness of LSOs, and they can usually not be deleted by the cookie privacy controls in a web browser.[5] This may lead a web user to believe a computer is cleared of tracking objects, when it is not.[5]

Several services even use LSOs as surreptitious data storage to reinstate traditional cookies that a user deleted, which is called 're-spawning' in homage to video games where adversaries come back to life even after being "killed," the report found. So even if a user gets rid of a website’s tracking cookie, that cookie’s unique ID will be assigned back to a new cookie again using the Flash data as the "backup." [6]

In certain countries it is illegal to track users without their knowledge and consent. For example, in the UK customers must consent to use of cookies/LSOs as defined in "Guidance on the Privacy and Electronic Communications (EC Directive) Regulations 2003" [1]...

"Cookies or similar devices must not be used unless the subscriber or user of the relevant terminal equipment:

  • is provided with clear and comprehensive information about the purposes of the storage of, or access to, that information; and
  • is given the opportunity to refuse the storage of, or access to, that information."

User control

Local Shared Objects are not temporary files. Users can only opt-out of Local Shared Objects globally by using the Global Storage Settings panel[7] of the online Settings Manager at Adobe's website. Users can also opt-out of them on a per-site basis by right-clicking the Flash player and selecting 'Settings'.

Adobe's online-only Website Storage Settings panel was created to let users view and delete LSOs on a per-domain basis. It is also possible to completely disallow LSOs from a specific domain by setting the storage space to "0 KB",[8] however, although no data is stored, empty directories with the name of the domain are nonetheless created. Add-on extensions have also been created for the Firefox Web browser, called Objection[9] and BetterPrivacy[10] that allow the user to view and delete LSOs.[10]

File locations

The default storage location for LSO files is operating system-dependent. LSO files are typically stored with a ".SOL" extension, within each User's directory. Note that for self-executing flash applications run on the local machine will show up as being run on a website, in the folder localhost.

  • Windows XP:
    • For Web sites: %APPDATA%\Macromedia\Flash Player\#SharedObjects\<random code>\<domain>\<path - maybe°>\<object name>.sol
  • Other Directories Where Flash LSO (*.SOL) Files Are Found in Windows XP:
    • C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\filename.sol
    • C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\#SharedObjects\[alpha-numeric folder name]\filename.sol
    • C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\filename.sol
    • C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\[alpha-numeric folder name]\filename.sol
    • C:\Documents and Settings\Owner.[Your_Owner_Name]\Application Data\Macromedia\Flash Player\#SharedObjects\[alpha-numeric folder name]\filename.sol
    • C:\Documents and Settings\Owner.[Your_Owner_Name]\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\filename.sol
    • C:\WINDOWS\system32\Macromed\[subdirectories]\filename.sol
    • For AIR Applications: %APPDATA%\<AIR Application Reverse Domain Name>\Local Store\#SharedObjects\<flash filename>.swf\<object name>.sol
  • Windows Vista and later:
    • For Web sites: %APPDATA%\Roaming\Macromedia\Flash Player\#SharedObjects\<random code>\<domain>\<path - maybe°>\<object name>.sol
    • For AIR Applications: unknown, likely similar to the above
  • Mac OS X:
    • For Web sites: ~/Library/Preferences/Macromedia/Flash Player/#SharedObjects/<random code>/<domain>/<path - maybe°>/<object name>.sol and ~/Library/Preferences/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/<object name>.sol
    • For AIR Applications: ~/Library/Preferences/<AIR Application Name>/Local Store/#SharedObjects/<flash filename>.swf/<object name>.sol
  • Linux/Unix:
    • ~/.macromedia/Flash_Player/#SharedObjects/<random id>/<domain>/<path - maybe°>/<flash filename>.swf/<object name>.sol

° - Flash player can save the file in any path specified by the SWF developer, relative to the current domain.


The Flash Player allows Web content to read and write LSO data to the computer's local drive on a per-domain basis;[11] such data may preserve session state and record user data and behavior.[12]

By default, a Flash application may store up to 100kb of data to user's hard drive (browser cookies have a limit of just 4kb).[11] The defined storage sizes are 0kb, 10kb, 100kb, 1Mb, 10Mb, and Unlimited.[13] If the current limit is exceeded, the user is shown a dialog requesting storage space of the next size. The user may override the amount manually by clicking the Flash application with right mouse button and selecting Settings; however, this applies only to the domain of the Flash movie. If the selected setting is smaller than the current data size, the data is deleted.

Global LSO settings are not under the direct control of the user, and can only be be amended through Adobe's online "Global Settings Manager" control panel.[13][14]

Editors and toolkits

Software Website Developer First public release Latest stable version Cost (USD) Open source License Programming language
SolVE SolVE Darron Schall 2004-09 0.2 (2004-10-15) Free Yes CPL Java
.sol Editor .sol Editor Alexis Isaac 2005-02 (2005-02-21) Free Yes MPL ActionScript, Delphi/Kylix
Dojo Toolkit Dojo Toolkit Dojo Foundation 2004 1.3.2 (2009-7-16) Free Yes BSD, AFL JavaScript
MAXA Cookie Manager MAXA Cookie Manager Maxa Research ? 3.2 (2009-02-02) Non-free 35 No proprietary ?
PyAMF PyAMF Nick Joyce 2007-10-07 0.5 (2009-09-07) Free Yes MIT Python
SOLReader SOLReader Alessandro Crugnola ? ? Free No ? C#, PHP [15]
s2x s2x Aral Balkan ? ? Free Yes ? Python [16]
.minerva coursevector.com Gabriel Mariani ? 3.0.0 (2010-01-07) Free Yes ? AIR

Operating system support

Software Windows Mac OS X Linux BSD Unix
SolVE Yes Yes No No No
.sol Editor Yes No No No No
Dojo Toolkit Yes Yes Yes Yes Yes
MAXA Cookie Manager Yes No No No No
PyAMF Yes Yes Yes Yes Yes


  1. "What are local shared objects?". Adobe. http://www.adobe.com/products/flashplayer/articles/lso/. Retrieved 2007-12-05. 
  2. "Flash Player Worries Privacy Advocates". InformationWeek. http://www.informationweek.com/news/showArticle.jhtml?articleID=160901743. Retrieved 2007-12-05. 
  3. "Flash Player : What Is a Local Shared Object?". Adobe. http://www.adobe.com/products/flashplayer/articles/lso/. Retrieved 2009-03-27. 
  4. "Adobe Flash cookies pose vexing privacy questions". Networkworld. http://www.networkworld.com/news/2009/081109-study-adobe-flash-cookies-pose.html. Retrieved 2009-04-10. 
  5. 5.0 5.1 5.2 "You Deleted Your Cookies? Think Again". Wired. http://www.wired.com/epicenter/2009/08/you-deleted-your-cookies-think-again/. Retrieved 2009-08-22. 
  6. Bruce Schneier http://www.schneier.com/blog/archives/2009/08/flash_cookies.html#comments
  7. "Adobe - Flash Player : Settings Manager - Global Storage Settings Panel". Macromedia.com. http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager03.html. Retrieved 2009-03-27. 
  8. "Adobe - Flash Player : Settings Manager - Website Storage Settings panel". Macromedia.com. http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html. Retrieved 2009-03-27. 
  9. "Objection web site". http://objection.mozdev.org/. Retrieved 2007-12-05. 
  10. 10.0 10.1 "Better Privacy web site". https://addons.mozilla.org/en-US/firefox/addon/6623. Retrieved 2009-08-26. 
  11. 11.0 11.1 "Macromedia Flash MX Security". Adobe. 2002-03-01. http://download.macromedia.com/pub/flash/whitepapers/security.pdf. Retrieved 2007-12-05. 
  12. "Local Shared Objects -Flash Cookies". Electronic Privacy Information Center. 2005-07-21. http://www.epic.org/privacy/cookies/flash.html. Retrieved 2007-12-05. 
  13. 13.0 13.1 "Global settings manager". Adobe. http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html. Retrieved 2007-12-05. 
  14. "TechNote: How to manage and delete local shared objects?". Adobe. http://www.adobe.com/go/52697ee8. Retrieved 2007-12-05. 
  15. "PHP example with source code". Alessandro Crugnola. http://www.sephiroth.it/assets/utils/SolReader.phps. Retrieved 2007-12-18. 
  16. "Web demo written in Python". Aral Balkan. http://icube.freezope.org/temp/util/s2x. Retrieved 2007-12-18. 

External links

Template:Adobe Flashde:Flash-Cookie es:Cookie flash ja:Local Shared Object

Personal tools

Served in 0.667 secs.