Ask HN: Why is Flash so vulnerable?

Re:Ask HN: Why is Flash so vulnerable? by ruraljuror on Friday July 17, 2015 @09:31AM (#9902607)

I was listening to the Security Now podcast this morning. On episode 514, Tor's Astoria Client about the first 30 minutes of the podcast is spent going into extreme detail about how a recent Flash vulnerability was exploited.

I can't link to a page for the episode.

Here is the episode list: https://www.grc.com/securitynow.htm

The episode: https://media.grc.com/sn/sn-514.mp3

The transcript: https://www.grc.com/sn/sn-514.txt

I think most of the content is sourced (and credited) to this post from FireEye: https://www.fireeye.com/blog/threat-research/2015/06/operati...

[ Parent | on HN ]

Re:Ask HN: Why is Flash so vulnerable? by bendmorris on Sunday July 19, 2015 @02:41AM (#9910246)

Thanks for sharing, this is fascinating.

Given the level of sophistication in this attack, I wonder to what extent the number of vulnerabilities found in Flash is a function of the effort spent disassembling it and searching for them specifically. Since browsers implement their own language runtimes, might they be vulnerable to the same types of attacks? Is there anything that makes Firefox inherently more secure than Flash?

[ Parent | on HN ]