Paypal - Flash Objects - tracking of PayPal via flash objects

[terryp]

Just a quick heads up as I’ve just had this happen (1/2 hour ago)…transferred money from my PP account and had 3 flash cookies left in the process???? All found by Ccleaner…system was clean before I logged into PP (I was not logged into eBay during this session)

These are NOT eBay related and do not say eBay or Paypal as the .sol

Looks like they are linking accounts via all the flash cookies!

[imjustme]

What were they called?

[terryp]

They were shown in Ccleaner as deleted ....I was going to write down the flash names but closed Ccleaner ??? Duhh!!! so lost all the data...but there are 3 of them; one had a weird start to it as 1999_ the other 2 were similar to the flash token generated by eBay…all random letters and numbers ..as I said before the system was totally clean before logging into PP and then transferring the funds


Forgot to say this was on PP UK...But I think everyone should be aware

[Jonas]

You're supposed to have flash blocked by default. Firefox plugins exist for it.


Better yet get:

K-Meleon

Has built-in flashblock that lets you selectively turn on flash. Flash is just functional as before, but you selectively click to load it. It's great.

Oh and cell phones like iPhone can't do flash.

[aspkin]

You guys in the UK have it bad... CCleaner FTW.

[terryp]

You will find that if you don’t allow Flash then some operations on eBay will now hang…as it tries to Install the cookies…just 1 example uploading photos by ebays pic service…I know it took me ages to figure out what the problem was & eBay’s technical gurus were well cr@p as they did not want to give out any info...you know why

Flash cookies are very hit & miss but if you make a login on mistake 99% you will get them when you do log on

eBay OZ is the worst for the cookies, UK is still for me 1 in 10 chance..deleting them so far has made no difference to getting them again (about 1 in 10)

eBay are now using 3 flash cookies some dated 2009 in the string

[zymo]

PayPal is now placing flash cookies on your computer.

[imjustme]

I haven't seen any. What are they called?

[zymo]

\Flash Player\macromedia.com\support\flashplayer\sys\#www.paypal.com\settings.sol

[aspkin]

Flash cookies are going to do some serious damage once eBay and Paypal start actively using them. We might see an influx of new readers to the forum soon.

[GreenBean]

Arrrgghhh! The horror!

[x2ruff4u]

You should do view source

[ddu]

Could someone please explain what that will mean exactly

[powerbid]

Originally Posted by zymo

\Flash Player\macromedia.com\support\flashplayer\sys\#www.paypal.com\settings.sol

i dont see any such file directory on my pc though? different for UK maybe ? but do logon to paypal.com

ELABORATE if u can plz

[TMiles]

IT Security Expert: Hidden Flash Cookies

[meowmix541]

Yes I caught one on my desktop computer last night from paypal of course I told it couldn't place any information my computer and denyed it.

[The_Cynic]

There is also talk that if you have java enabled they can insert cookies into your java folder that will never delete. I searched but did find anythiong on it, but it was referenced in an ebay message on tracking.

--- I think the solution is to set up different user accounts on your computer, since all cookies, java, flash and regular are put into folders segregated by user. Only access ebay or paypal using the user account you have selected on your computer. Unless you you give them permission to put active X controls on your computer (Turbolister!!!!) they cannot track you.

[ebayhateluv]

HI: I dont know what theyre called--but some banks use something besides a normal cookie to see if youre using the same pc--
i.e. Bank of America--uses a Site cookie/image---then when you log in on a diff pc-or after you use cookie cleaner--they know.
>>also--on Navy Federal credit union--when u log in to ck your acct bal/status on your credit app--it knows and asks you if you want to add this pc--if its different than last time, it automatically asks you a secret question youve set up to verify you...

>>MAYBE all these financial sites are going to this??

[imjustme]

I haven't found any across my almost 20 accounts I log into daily. They may not use them in the same way as eBay either. Perhaps only as settings cookies, not tracking cookies.

[The_Cynic]

I just found paypal flash cookies in my flash folder.

[Exeneva]

So is it possible to not create new accounts but clear your flash cookies using the flash manager every time you change accounts/login?

[Marine]

I could set up a guide on how to run a virtual PC on your current pc, therefor not linking any cookies, info etc at all. It's like using a different computer.

Enough requests and i will.