News for hackers. Stuff that matters.
Re:Ruffle: Flash Player Emulator by phendrenad2 on Monday October 23, 2023 @07:15AM (#37984082)
Yeah, exactly. Just because everyone says it doesn't make it so, and the general public are often wildly wrong about basic computer facts.
Re:Ruffle: Flash Player Emulator by justinclift on Monday October 23, 2023 @01:04PM (#37988460)
Well, neither of us seem to have supporting evidence so far... ;)

---

Using some different search parameters is turning up some results:

* http://web.archive.org/web/20140903235611/https://crash-anal...

* https://wiki.mozilla.org/CrashKill/Flash

* https://wiki.mozilla.org/CrashKill/Flash_Breakdown_Data

There is some talking around the problem on the old Mozilla Blog:

* https://blog.mozilla.org/en/mozilla/firefox-3-6-4-with-crash...

Things being about a decade old is adding further difficulty. :/

Re:Ruffle: Flash Player Emulator by phendrenad2 on Monday October 23, 2023 @01:28PM (#37988841)
That's not supporting evidence of the actual important part of the claim though. This is like asking "Did the 2008 Ford Ranger have electrical issues due to cost-cutting measures after the housing bubble collapse and subsequent layoffs?" and pointing to some forum posts where individual instances of that vehicle had electrical issues. I could dig up those posts and point to people saying "I've never had those issues", and I guess we can count them pound-for-pound right? But that's not scientific, and neither is this.

Look, I'm not saying that 3rd party plugins never crashed, which would be invalidated by your links. I'm saying that it needs to be proven that they were widespread and/or an actual problem.

AND ALSO we should make sure to prove that the same problem doesn't still exist in the Javascript ecosystem. Which, well, they do. The multiple layers of Javascript confinement we've added to browsers, guess what, those would have worked for Flash too. Saying that it couldn't be secured because it's 3rd party is counter-scientific.

Re:Ruffle: Flash Player Emulator by phendrenad2 on Monday October 23, 2023 @01:47PM (#37989088)
> http://web.archive.org/web/20140903235611/https://crash-anal...

This is a page where Firefox developers are discussing how to inject their own crash-reporting code into the sandboxed flash container. I never said that 3rd party plugins didn't occasionally have crashes, so I don't see the point of this link. Can you elaborate?

> https://wiki.mozilla.org/CrashKill/Flash

This lists crashes seen in the Flash module. But again, I never said that 3rd party plugins didn't occasionally have crashes.

> https://wiki.mozilla.org/CrashKill/Flash_Breakdown_Data

This is a documentation page about types of all-cause failures related to Flash, (could be Firefox code issues)

> https://blog.mozilla.org/en/mozilla/firefox-3-6-4-with-crash...

Javascript also has "crash protection" in the form of a sandbox. That's why pages can "crash" without taking down the entire browser. This would also work exactly the same for Flash.

Re:Ruffle: Flash Player Emulator by justinclift on Wednesday October 25, 2023 @03:25AM (#38010168)
Yeah, that's all fair.

Did you manage to find citations supporting your assertion? :)