News for hackers. Stuff that matters.
Re:Two more Flash 0-days emerge in Hacking Team leak by bohm on Sunday July 12, 2015 @12:33PM (#9873960)
guess it's time to disable flash for a few weeks...
Re:Two more Flash 0-days emerge in Hacking Team leak by ghshephard on Sunday July 12, 2015 @12:41PM (#9873984)
A significant portion of the web using community (including myself) stopped using flash 6-12 months ago, when all the zero-days became a monthly occurrence. The plugin is no longer strategic for adobe, they've stopped any forward-looking development on it, and are now in the mode of whack-a-mole reactive security patching.

I have not once every missed having flash on my system. It's not just the case that the web is useable, it's that, with the single exception of the BBC, it doesn't seem to use it anywhere I visit.

Re:Two more Flash 0-days emerge in Hacking Team leak by joosters on Sunday July 12, 2015 @01:01PM (#9874065)
The BBC site will use non-flash videos if you browse it on an iPad, but they don't seem smart enough to serve these to you if you use a desktop browser with flash disabled.

Presumably they could implement a non-flash fallback for users but unfortunately they just haven't bothered.

I tried to cheat by modifying my User-Agent to pretend to be an iPad but had no luck...

Re:Two more Flash 0-days emerge in Hacking Team leak by cormullion on Sunday July 12, 2015 @02:27PM (#9874372)
I was going to agree with you, but I've just double-checked, and you CAN access video content on the BBC sites on a desktop (MacOS X Safari) by setting your User-Agent to iPad. However, it's important that you've removed Flash completely from your system (using Flash Uninstaller), rather than just disable Flash (hoping to use Click-To-Flash). For some reason, they detect Flash by some kind of file-path-detection code...
Re:Two more Flash 0-days emerge in Hacking Team leak by joosters on Sunday July 12, 2015 @03:44PM (#9874657)
That's irritating! I'll have to take a closer look at what they are doing, as I'd like to keep flash around on a click-to-run basis.

I'm surprised that websites can do any kind of file path detection on a client...

Re:Two more Flash 0-days emerge in Hacking Team leak by reagency on Sunday July 12, 2015 @04:33PM (#9874853)
What horrible browser lets a website inspect the filesystem without permission?
Re:Two more Flash 0-days emerge in Hacking Team leak by elktea on Monday July 13, 2015 @03:51AM (#9876895)
Browsers give away far too much information: https://panopticlick.eff.org/
Re:Two more Flash 0-days emerge in Hacking Team leak by smackfu on Monday July 13, 2015 @10:58AM (#9878487)
>A significant portion of the web using community (including myself) stopped using flash 6-12 months ago

That seems unlikely. Maybe HN users, but that's not really representative of web users overall

Re:Two more Flash 0-days emerge in Hacking Team leak by dhimes on Sunday July 12, 2015 @01:08PM (#9874097)
I'm on some troubleshooting pages for canon that require flash. Seems they are in the process- as there are html 5 vids on the site as well.
Re:Two more Flash 0-days emerge in Hacking Team leak by ExpiredLink on Sunday July 12, 2015 @01:28PM (#9874175)
> The plugin is no longer strategic for adobe, they've stopped any forward-looking development on it, and are now in the mode of whack-a-mole reactive security patching.

[citation needed]

Re:Two more Flash 0-days emerge in Hacking Team leak by ghshephard on Sunday July 12, 2015 @01:48PM (#9874246)
About four years back Adobe committed to HTML5 on mobile platforms, and noted they would only provide bug fixes and security patches.

http://www.cbsnews.com/news/adobe-abandons-flash-player-on-m...

http://www.telegraph.co.uk/technology/news/8879783/Adobe-aba...

Re:Two more Flash 0-days emerge in Hacking Team leak by concerned_user on Monday July 13, 2015 @03:03AM (#9876788)
Simply because at that time both Google and Apple have banned Flash on their respective platforms, otherwise nothing would change.
Re:Two more Flash 0-days emerge in Hacking Team leak by ghshephard on Monday July 13, 2015 @03:23AM (#9876823)
I'm not sure what your point is, but the reality on the ground, is that if you want to provide access to video, or other rich content, flash is incapable of reaching the largest audience, and the audience that's growing the fastest. Adobe has made it clear there will no longer be any development of flash on the mobile platform. HTML5 is the strategic platform for adobe moving forward.

Absolutely no new major content sites as of around 2014 or so support flash as an option - they are all starting with HTML5 and/or thick local clients.

Flash needs to be EOL'd, and the sooner the better for the security of the Internet.

Re:Two more Flash 0-days emerge in Hacking Team leak by micampe on Sunday July 12, 2015 @02:50PM (#9874452)
Citation needed comments are lazy and useless.
Re:Two more Flash 0-days emerge in Hacking Team leak by sebcat on Sunday July 12, 2015 @12:42PM (#9873988)
I've been running without Flash for a couple of years now. The only thing I can't do that I would like to be able to do is to watch Facebook videos. Other than that, not having Flash installed is not a problem for me.
Re:Two more Flash 0-days emerge in Hacking Team leak by degenerate on Sunday July 12, 2015 @01:21PM (#9874147)
Facebook doesn't use HTML5? Why?!
Re:Two more Flash 0-days emerge in Hacking Team leak by TD-Linux on Sunday July 12, 2015 @04:41PM (#9874885)
They will if you force a mobile user agent. I wish I knew why they didn't on desktop.
Re:Two more Flash 0-days emerge in Hacking Team leak by cpeterso on Sunday July 12, 2015 @05:40PM (#9875095)
Facebook now supports HTML5 video for Windows 7+.
Re:Two more Flash 0-days emerge in Hacking Team leak by bratch on Monday July 13, 2015 @07:18AM (#9877386)
Swap the "www" in the URL for "m" on a video page and you'll get a low resolution HTML5 video!
Re:Two more Flash 0-days emerge in Hacking Team leak by jimmaswell on Sunday July 12, 2015 @01:21PM (#9874148)
I just set it to only activate when I approve it, for if I'm on a trusted website.
Re:Two more Flash 0-days emerge in Hacking Team leak by chinathrow on Sunday July 12, 2015 @01:11PM (#9874110)
No, it's time to uninstall all plugins for good.