Two more Flash 0-days emerge in Hacking Team leak

Re:Two more Flash 0-days emerge in Hacking Team leak by joosters on Sunday July 12, 2015 @01:01PM (#9874065)

The BBC site will use non-flash videos if you browse it on an iPad, but they don't seem smart enough to serve these to you if you use a desktop browser with flash disabled.

Presumably they could implement a non-flash fallback for users but unfortunately they just haven't bothered.

I tried to cheat by modifying my User-Agent to pretend to be an iPad but had no luck...

[ Parent | on HN ]

Re:Two more Flash 0-days emerge in Hacking Team leak by cormullion on Sunday July 12, 2015 @02:27PM (#9874372)

I was going to agree with you, but I've just double-checked, and you CAN access video content on the BBC sites on a desktop (MacOS X Safari) by setting your User-Agent to iPad. However, it's important that you've removed Flash completely from your system (using Flash Uninstaller), rather than just disable Flash (hoping to use Click-To-Flash). For some reason, they detect Flash by some kind of file-path-detection code...

[ Parent | on HN ]

Re:Two more Flash 0-days emerge in Hacking Team leak by joosters on Sunday July 12, 2015 @03:44PM (#9874657)

That's irritating! I'll have to take a closer look at what they are doing, as I'd like to keep flash around on a click-to-run basis.

I'm surprised that websites can do any kind of file path detection on a client...

[ Parent | on HN ]

Re:Two more Flash 0-days emerge in Hacking Team leak by reagency on Sunday July 12, 2015 @04:33PM (#9874853)

What horrible browser lets a website inspect the filesystem without permission?

[ Parent | on HN ]

Re:Two more Flash 0-days emerge in Hacking Team leak by elktea on Monday July 13, 2015 @03:51AM (#9876895)

Browsers give away far too much information: https://panopticlick.eff.org/

[ Parent | on HN ]