Live data from Hacker News

Petition to open source Flash

github.com

11–20 of 255 posts

Re: Petition to open source Flash

#11
post #5

Isn't Flash player's code super-messy by now? (a hint towards that could be all the vulnerabilities found for it every week). Open sourcing it would have to dramatically improve the code quality and in a relatively short period of time (2 years max), otherwise browser vendors would never go along with it (nor should they). Sounds like a daunting task, especially if no big organization/leader takes up the task of clea…

it'd be so embarrassing that it'll never happen

Re: Petition to open source Flash

#12
post #5

Isn't Flash player's code super-messy by now? (a hint towards that could be all the vulnerabilities found for it every week). Open sourcing it would have to dramatically improve the code quality and in a relatively short period of time (2 years max), otherwise browser vendors would never go along with it (nor should they). Sounds like a daunting task, especially if no big organization/leader takes up the task of clea…

How about just open sourcing pepper flash to start with? That has fewer security issues, if I understand it correctly.

Re: Petition to open source Flash

#13
There could be an issue of opening up even more security issues for people with Flash still installed. That, in turn, will likely lead to an all out campaign to remove Flash from everything possible (maybe not a bad thing at this point).

But, honestly - Flash as a platform hasn't advanced much in quite a while. What it once offered - rich multimedia runtime engine across platforms - is either available in the browser directly or can be attained through even more rich engines such as Unity3D.

Re: Petition to open source Flash

#15
post #5

Isn't Flash player's code super-messy by now? (a hint towards that could be all the vulnerabilities found for it every week). Open sourcing it would have to dramatically improve the code quality and in a relatively short period of time (2 years max), otherwise browser vendors would never go along with it (nor should they). Sounds like a daunting task, especially if no big organization/leader takes up the task of clea…

I had access to the FlashLite source code a while back, and it was a total disaster. I can't imagine how bad the mainline code is.

Re: Petition to open source Flash

#16
How about a petition to have Adobe put into all versions of Flash going forward code to disable the flash player on the EOL date so that the danger of security vulnerabilities from the damn thing will be greatly reduced.

Re: Petition to open source Flash

#18
post #9
post #7

Earlier quoted context omitted.

Sure, but if anyone is really interested in Flash and Adobe's player is reaching EOL, whatever open source project gets to be used as its substitute will become the standard, and no one will care about compatibility with Adobe's Flash player, since no one will have it installed.

Which one is everyone going to install: an open source flash player that's not quite compatible, or the adobe one that's perfectly compatible?

The one that isn't abandoned, which in 2020 will be the open source one.

Again, I don't see why if there's interest in Flash and Adobe is abandoning its player, the open source ones can't be made to work as well (or as bad) as Adobe's.

Firefox copied IE's quirks back in the day, I don't see why it can't be done again.

Re: Petition to open source Flash

#19
No no no no NO. It's time to get rid of Flash. Open-sourcing will make it live forever.

Flash has very little to offer that is not at this point duplicated (or improved upon) by others. It's also woefully insecure. "Many eyes make all bugs shallow" will only work for the most trivial bugs in the most common code paths. Plenty of vulnerabilities will remain. In open source, they'll be even easier for attackers to find and exploit. If you want something open-source and (mostly) Flash compatible, follow nkkollaw's suggestion: support one of the already-open-source alternatives.

Re: Petition to open source Flash

#20
post #5

Isn't Flash player's code super-messy by now? (a hint towards that could be all the vulnerabilities found for it every week). Open sourcing it would have to dramatically improve the code quality and in a relatively short period of time (2 years max), otherwise browser vendors would never go along with it (nor should they). Sounds like a daunting task, especially if no big organization/leader takes up the task of clea…

You don't necessarily need to fix all the bugs. It just needs to be sandboxed properly. In the extreme case you could compile it to web assembly and run it inside the browsers existing wasm sandbox.

I think all the comments are missing the point. This is about preserving our digital history. A huge amount of content exists only in flash. It would be sad to see it all disappear. It's even being used in important AI research, with openAI making a ton of old flash games available for training AIs. I have fond memories of many simple flash games I used to play on the school computers. I still have a bunch of .swf files I saved that won't open anymore.

Post reply on HN