Live data from Hacker News

Firefox makes click-to-activate Flash the default

support.mozilla.org

221–230 of 398 posts

Re: Firefox makes click-to-activate Flash the default

#221
post #59

Earlier quoted context omitted.

Copy to clipboard, apparently. (Github project pages have a flash application to handle this)

Good news, we're getting there. In Chrome 43 and (probably) Firefox it's supported: http://caniuse.com/#search=clipb (see note 3) However the API is god awful.

> However the API is god awful.

To be fair, it's basically a proprietary IE5 API that's now been standardised (like quite a few others).

Re: Firefox makes click-to-activate Flash the default

#222
post #75
post #42

Bugs are always bad (and security bugs even more so) - but I've always felt that Flash gets a disproportional amount of hate/hype in the media. To some degree it should be normal that the more widespread a technology is - the more it gets targeted for security exploits. If you run the popular browsers/plugins against the National Vulnerability Database, you'd get the following results (as of January 2014): - Internet…

I don't think the hate comes from bugs or exploits. I think people hate flash because it is laggy, slow, make things move in your screen you don't want, widely use for ads or to shit on the user experience, etc. Granted most of it might be bad programming, but I still think he comes from here rather than exploits.

Clearly all this crap will still happen in a flash free world.

Re: Firefox makes click-to-activate Flash the default

#223
post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

When is the formal EOL for Firefox? It's my primary browser, but some people hate it, so just thought I'd ask when the EOL for Firefox is? Flash is never blocked for me in Firefox and never will be. Because a few months back I did this: 1. about:config 2. extensions.blocklist.enabled - 'false' Job done. No more Mozilla annoyances between me and the content I wish to access. And yes, it was an annoyance because the li…

Holy shit. Flash has over 34 CVEs in one week—and only because a prominent organization that was sitting on a bunch of them got hacked—and you call mozilla taking steps to protect the security and integrity of their customers an "engineered annoyance"?

Grow up.

Re: Firefox makes click-to-activate Flash the default

#224

Anyone know if Google Finance has said anything about their charts moving away from Flash?

If you search for a stock symbol in Google Web Search (instead of Google Finance) you'll get a SVG-and-JavaScript chart that has fewer features.

If you don't need the specific features in the Google Finance chart, that might be a good alternative.

(Disclaimer: I work at Google but not on Google Finance. My own opinion, yada yada.)

Re: Firefox makes click-to-activate Flash the default

#225

This is priceless http://i.imgur.com/3uNsIF2.png

The final act of HTML5 delusion - it becomes "ready" because we say it's "ready". It's just someone forgot to ask Flash (game) developers' opinion. Not that it matters, right?

Haven't all the flash game developers moved on anyways? To either mobile or steam.

Re: Firefox makes click-to-activate Flash the default

#226
post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

> To be clear, by "blocked" Flash we really mean enforced click-to-activate

For the record, I'm more than fine with that. In fact, I've used extensions to get that effect for years.

Re: Firefox makes click-to-activate Flash the default

#228

Earlier quoted context omitted.

Github uses flash for the 'copy to clipboard' button to copy an http or ssh url to the clipboard.

Something I noticed after making my Flash click-to-activate a while back. That seems like a HUMONGOUS tunnel to create in order to allow copy to clipboard, and fairly irresponsible on GitHub's part. What developer doesn't know how to copy to clipboard?

Github claims that the flash version is "currently the only reliable way to put data in the clipboard". This seems to indicate that they looked at the native browser option and found it unacceptable for their use case.

https://github.com/blog/1365-a-more-transparent-clipboard-bu...

Re: Firefox makes click-to-activate Flash the default

#229
post #214

Earlier quoted context omitted.

This is great. Let's continue: remove pocket, remove hello

Hello is just few (hundred?) lines of Javascript giving UI to WebRTC. Unless you want to remove WebRTC and that's just stupid.

Removing registration on Hello servers and WebRTC altogether is not stupid if you give a shit about your privacy, look at the leaks WebRTC provides, local IPs which are great for fingerprinting, real IPs from behind VPN, etc. It's one big gaping privacy nightmare so far, so it's pretty reasonable to have it disabled, until this gets sorted out at least.

Fortunately it can be toggled off in about:config easily.

Set loop.enabled = false to disable hello, set media.peerconnection.enabled = false to disable WebRTC. If you don't want pocket, set browser.pocket.enabled = false.

You can even make yourself one big user.js file to fix the bad ideas that have been added to Firefox lately. Mozilla still has a good thing going for them, and that is user choice. However stupid the defaults get.

Re: Firefox makes click-to-activate Flash the default

#230
post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

What made Flash so fast ? was it direct unsafe access to the metal or was there some black magic in their code ?
Post reply on HN