Earlier quoted context omitted.
Their latest controller (v4?) removed the Flash requirement for both video (playback) and main (maps) IIRC. Do they still have leftover areas that require Flash?
v4 is a long way from being a stable release
Two more Flash 0-days emerge in Hacking Team leak
121–130 of 193 posts
Re: Two more Flash 0-days emerge in Hacking Team leak
#122I would like to hear what Adobe have to say about their streak of serious security problems. Not only that, but they should face some consequences for that neglect. At least be forced to publish a working spec for Flash.
Re: Two more Flash 0-days emerge in Hacking Team leak
#123Earlier quoted context omitted.
Their latest controller (v4?) removed the Flash requirement for both video (playback) and main (maps) IIRC. Do they still have leftover areas that require Flash?
v4 is a long way from being a stable release
Re: Two more Flash 0-days emerge in Hacking Team leak
#124I would like to hear what Adobe have to say about their streak of serious security problems. Not only that, but they should face some consequences for that neglect. At least be forced to publish a working spec for Flash.
If there were actually a government body that cared about "cyber"-security, they'd be hauled up in front of it. They're basically an infosec Bhopal - creating a toxic mess that other people have to clean up over a period of decades.
Re: Two more Flash 0-days emerge in Hacking Team leak
#125Earlier quoted context omitted.
I do not disagree. In fact, I personally have a problem with all non-vendor vulnerability sales, for the same reason. I just think we should be clear that exploit developers, brokers, and users don't actually create vulnerabilities; software companies do. I also think people should give Adobe a little bit of a break --- not much of one, but a little. Adobe got monstrously successful off a codebase that largely predat…
Macromedia/Adobe has had 15 years to respond to the news that Internet security matters. 15 years.
Re: Two more Flash 0-days emerge in Hacking Team leak
#126Earlier quoted context omitted.
YouTube's HTML5 video player has always been a shit-show, and I don't understand why. Vimeo has had an excellent HTML5 video player for many years, and there's at least a few third-party HTML5 video players that are pretty good as well.
Speak for yourself. YouTube's HTML5 video player has always been stellar for me.
Among the various issues I've seen:
* Sometimes refuses to play anything, without showing any errors, requiring a reload of the page.
* Occasional poor performance.
* Audio/video desynchronization
* Scrubbing the video often causes it to get stuck, refusing to play, until I scrub it again
* Videos often take longer to start playing than with the flash player.
* Fullscreen is sometimes broken
* Switching from regular mode to "theater" mode sometimes leaves the video playing in its original size, anchored to the corner of the now-larger black area that it should be playing in.
I think it's gotten a little better recently (i.e. I see issues less often), but it's still far from great.
And before you ask, I've seen these issues in both Safari and Chrome.
Re: Two more Flash 0-days emerge in Hacking Team leak
#127I would like to hear what Adobe have to say about their streak of serious security problems. Not only that, but they should face some consequences for that neglect. At least be forced to publish a working spec for Flash.
Re: Two more Flash 0-days emerge in Hacking Team leak
#128I would like to hear what Adobe have to say about their streak of serious security problems. Not only that, but they should face some consequences for that neglect. At least be forced to publish a working spec for Flash.
you probably can lookup news archives of the last ~15 years for that
Re: Two more Flash 0-days emerge in Hacking Team leak
#129I would like to hear what Adobe have to say about their streak of serious security problems. Not only that, but they should face some consequences for that neglect. At least be forced to publish a working spec for Flash.
you probably can lookup news archives of the last ~15 years for that
Re: Two more Flash 0-days emerge in Hacking Team leak
#130The last release I've found is 11.2, which seems to be years old and the last ever.