Live data from Hacker News

Chrome will begin pausing many Flash ads by default on September 1

plus.google.com

41–50 of 179 posts

Re: Chrome will begin pausing many Flash ads by default on September 1

#41

I hope that Google takes the next, bigger step and kills its YouTube Flash player. The HTML5 one is superior in almost every way and so many browsers now support HTML5[1]. It would be a really meaningful statement. This is just a bit 'meh'. [1] http://html5readiness.com/

Will need Flash for live streams for a while

Re: Chrome will begin pausing many Flash ads by default on September 1

#42
post #13

Earlier quoted context omitted.

Just out of curiosity - could there be issues other than just performance here? For ex., could it be that Flash based ads can identify user/device contributing to privacy issues?

Flash also has a ton of vulnerabilities and a huge codebase, and according to Apple, caused a ton of crash reports from their computers.

TBH if a Flash crash or any other user space application crash causes a system crash it's an issue with the OS. Steve Jobs at the time said that every time MacOS crashes it's more often than not Flash's fault, which wasn't really true and would only speak "wonders" of how well MacOS isolates user space applications...

On the security issues it's some what true because the nature of Flash, applications like these are almost impossible to sandbox properly unless you have an operating system that sandboxes everything by default.

Flash it self these days is pretty much code execution as a service it can do pretty much everything you want some browsers sandbox it better than others but it's still intended to pull code from the ether and run it and when you have a setup like that you will never be able to limit it effectively. Flash can be phased out only because it's mostly used to play various forms of media, but any other use of it cannot be converted to HTML5.

If Javascript (as it's parsed and executed in browsers) will ever get to the point of being as flexible and powerfull as Flash is today you'll see browser based RCE vulnerabilities skyrocket also, JS is safe to use only because the browsers restrict it, Flash and AIR are intended to support everything from an animated ad to a full desktop application.

Just look at Node.JS (and many NoSQL DB's that used JS) in it's early years almost every (non-DOM based) cross-site scripting vulnerability in a Node.JS application could result in remote code execution on the server, even today you can still easily cause it if you don't handle the code properly one stupid eval in your node code which was there for lazy debugging can lead to your box getting owned in minutes.

Re: Chrome will begin pausing many Flash ads by default on September 1

#43

I got plugins disabled by default in Chrome for ages now (right click run plugin when needed). Before that on FF i had an add on that disabled autorun for flash also (very similar to how chrome does it with plugins gotta right click to load it). But if Google does it only for none Google adnetworks that's going to be a huge lawsuit. The article doesn't really clarify why would it work on Google own networks because t…

> I got plugins disabled by default in Chrome for ages now (right click run plugin when needed).

that should be the default. And that's also going to be impossible now those annoying bits will be HTML5.

Re: Chrome will begin pausing many Flash ads by default on September 1

#44

I hope that Google takes the next, bigger step and kills its YouTube Flash player. The HTML5 one is superior in almost every way and so many browsers now support HTML5[1]. It would be a really meaningful statement. This is just a bit 'meh'. [1] http://html5readiness.com/

What irritates me is that flash is required for google music. I really like google music over all the other radio services, plus I have some music in my lib, but I've resorted to just looking up albums on youtube. If it's an absolute must have for some technical reason, a desktop client would be nice as an alternative.

And Google Finance... It is rather ironic half of their sites are going to break, unless they conveniently add an exception.

Re: Chrome will begin pausing many Flash ads by default on September 1

#45

Earlier quoted context omitted.

Flash also has a ton of vulnerabilities and a huge codebase, and according to Apple, caused a ton of crash reports from their computers.

TBH if a Flash crash or any other user space application crash causes a system crash it's an issue with the OS. Steve Jobs at the time said that every time MacOS crashes it's more often than not Flash's fault, which wasn't really true and would only speak "wonders" of how well MacOS isolates user space applications... On the security issues it's some what true because the nature of Flash, applications like these are…

They're not system crash but application crash, both are reported on MacOS X. So no, Flash didn't crash the OS, only apps like Safari, Firefox or Chrome. Isn't it enough ?

Re: Chrome will begin pausing many Flash ads by default on September 1

#46

I hope that Google takes the next, bigger step and kills its YouTube Flash player. The HTML5 one is superior in almost every way and so many browsers now support HTML5[1]. It would be a really meaningful statement. This is just a bit 'meh'. [1] http://html5readiness.com/

What irritates me is that flash is required for google music. I really like google music over all the other radio services, plus I have some music in my lib, but I've resorted to just looking up albums on youtube. If it's an absolute must have for some technical reason, a desktop client would be nice as an alternative.

In GM settings, you can opt in for HTML5 audio. I have been using it for more than a year, it works extremely well.

Re: Chrome will begin pausing many Flash ads by default on September 1

#48

Earlier quoted context omitted.

I've gotten high mileage by blocking OVPs directly. I'm advocating doing this to encourage video providers to NOT enable autoplay on video. 0.0.0.0 www.autofixinfo.com # Autoplay video 0.0.0.0 c.brightcove.com # Autoplay video 0.0.0.0 player.theplatform.com # Autoplay video 0.0.0.0 link.theplatform.com # Autoplay video 0.0.0.0 ci-2862d2c8d6-68f418d2.http.atlas.cdn.yimg.com # Autoplay video 0.0.0.0 video-img2.thedaily…

>* I've gotten high mileage by blocking VPNs directly.* Uh... oh! You meant CDNs? I'd suspect there'd be a lot of collateral damage if you block entire CDNs, no?

As I discovered while looking for targets of opportunity, the term of art is apparently "online video provider", or OVP (not "VPN" as I'd first written, thinking "video provider network".

"Tips for Choosing an Online Video Platform (OVP)" http://www.streamingmedia.com/Articles/Editorial/Featured-Ar...

Yes, there's collateral damage. I'll take it. If needs be, I'll hop into /etc/hosts and unblock for a moment.

Re: Chrome will begin pausing many Flash ads by default on September 1

#49

I hope that Google takes the next, bigger step and kills its YouTube Flash player. The HTML5 one is superior in almost every way and so many browsers now support HTML5[1]. It would be a really meaningful statement. This is just a bit 'meh'. [1] http://html5readiness.com/

Google has forced me to use YouTube with the HTML5 player for months now. There isn't an option anywhere to switch back to the Flash player.

I thought this change was universal, but you seem to be suggesting it's not. Did I wind up trapped in the less friendly part of an A/B test?

Re: Chrome will begin pausing many Flash ads by default on September 1

#50
post #37

Earlier quoted context omitted.

I've gotten high mileage by blocking OVPs directly. I'm advocating doing this to encourage video providers to NOT enable autoplay on video. 0.0.0.0 www.autofixinfo.com # Autoplay video 0.0.0.0 c.brightcove.com # Autoplay video 0.0.0.0 player.theplatform.com # Autoplay video 0.0.0.0 link.theplatform.com # Autoplay video 0.0.0.0 ci-2862d2c8d6-68f418d2.http.atlas.cdn.yimg.com # Autoplay video 0.0.0.0 video-img2.thedaily…

Yeah, but you can only do that in systems with access to DNS resolution. Tablets, mobile phones and computer systems as normal user, no such luck.

Rooted Android works. You can swap the /etc/hosts file.

Plugins such as uBlock Origin should allow for adding hosts to blocklists.

Post reply on HN