News for hackers. Stuff that matters.
Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by Wowfunhappy on Wednesday December 09, 2020 @05:32PM (#25366237)
I've actually been wondering for a long time how Adobe was going to enforce their statement that Flash Content would stop working at the end of the year. This makes it sound like there's a date-based kill switch built into their software.

I don't think I like that. Yes, using Flash in a web browser once it has stopped receiving security updates is a bad idea, but what if you need to view a website in the Wayback Machine which incorporates flash, and you've set up an isolated VM for the purpose? I suppose you could set the VM's clock back, but that's a major PITA which could potentially cause other issues.

The existence of Flash Projector softens the blow significantly, but there will be some content that must be viewed within a web browser. Perhaps an earlier version of Flash Player lacks the kill switch?

Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by derefr on Wednesday December 09, 2020 @07:01PM (#25367414)
Indeed, even if a time-based killswitch was embedded into current versions of Flash, it would make no sense for versions of Flash from before the whole "Flash is going out of style; Flash is deprecated; Flash is dead" arc to contain such a killswitch. Flash used to be one of Adobe's tent-poles!

Conveniently, given that any Flash content published as SWF was probably authored at least 10 years ago, you could very likely get away with using such an older version of Flash to view such sites.

Rather than tracking one down yourself, I'd suggest, for best compatibility, just using a VM of an OS that ships with an older version of Flash. For example, later releases of Windows XP.

That's what the blog One Terabyte of Kilobyte Age (https://oneterabyteofkilobyteage.tumblr.com/) uses to generate its screenshots, and they almost always work.

Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by k_sze on Wednesday December 09, 2020 @08:42PM (#25368479)
This is when I wish we could demand that Adobe release the source code to Flash, at least the player part.
Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by CharlesW on Wednesday December 09, 2020 @05:57PM (#25366521)
> The existence of Flash Projector softens the blow somewhat, but there will be some content that must be viewed within a web browser.

FWIW, Ruffle appears to be able to play Flash content within a web browser: https://ruffle.rs/demo/

Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by Wowfunhappy on Wednesday December 09, 2020 @05:58PM (#25366539)
Yes, but its compatibility is very far from 100%. It will likely get better with time; it is unlikely to ever be perfect.
Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by CharlesW on Wednesday December 09, 2020 @06:17PM (#25366833)
I just wanted to note that the problem you mentioned is being actively addressed by the Ruffle team. As you mention, it will continue to get better with time.

(Related Internet Archive post on their new Flash collection: https://blog.archive.org/2020/11/22/flash-back-further-thoug...)

Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by kmeisthax on Wednesday December 09, 2020 @08:00PM (#25368052)
I should point out that while the Projector doesn't download the killswitch policy file, it does honor it, so you'll have to jump through extra steps to use files in the projector after January.
Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by Wowfunhappy on Wednesday December 09, 2020 @08:51PM (#25368556)
Would you be able to explain how the killswitch is actually implemented? It sounds like you may know! :)
Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by bigiain on Wednesday December 09, 2020 @08:00PM (#25368047)
> I suppose you could set the VM's clock back, but that's a major PITA which could potentially cause other issues.

Like breaking TLS cert validity date checks.

Though, I suppose if some website hasn't migrated off Flash by 2020, it's probably reasonably likely to also be in the subset of websites that haven't implements https by now as well...

Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by kristofferR on Wednesday December 09, 2020 @08:17PM (#25368237)
Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by dathinab on Wednesday December 09, 2020 @08:50PM (#25368553)
Ah, yes, I remember I have facepalmed big time when I did run into it ~1 year ago.

I'm wondering if the IT team which produced that pice of software is gone since years.

Edit: I somehow missed that my spell checker replaced "have facepalmed" with "gave poisoned"...

Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by Wowfunhappy on Wednesday December 09, 2020 @08:45PM (#25368508)
I was also thinking of https, yes. The Wayback Machine uses https even if the sites in its archive originally did not.
Re:Flash Player EOL, Adobe Announces 12-Day Grace Period by userbinator on Wednesday December 09, 2020 @07:57PM (#25368025)
If there is, there will certainly be cracks.

The copyright stance on breaking DMCA for preservation is far more clear when the original owner is explicitly dropping support.