Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox makes click-to-activate Flash the default

support.mozilla.org

Post reply on HN
Print view View original

251–260 of 398 posts

Re: Firefox makes click-to-activate Flash the default

#251

Post by TD-Linux »

ultramancool wrote: post #229
glogla wrote: post #214

Earlier quoted context omitted.

Hello is just few (hundred?) lines of Javascript giving UI to WebRTC. Unless you want to remove WebRTC and that's just stupid.

Removing registration on Hello servers and WebRTC altogether is not stupid if you give a shit about your privacy, look at the leaks WebRTC provides, local IPs which are great for fingerprinting, real IPs from behind VPN, etc. It's one big gaping privacy nightmare so far, so it's pretty reasonable to have it disabled, until this gets sorted out at least. Fortunately it can be toggled off in about:config easily. Set lo…

I agree with a lot of this, but not turning off WebRTC in general. Certainly you should turn it off (or force TURN only) if you're trying to hide your IP behind a VPN. But IPv6 already causes you to lose the same amount of privacy as exposing your IPv4 address behind a NAT, so it seems somewhat of a lost cause.

I still think WebRTC enabling peer to peer connections is better than running all of your data through a third party server.

Re: Firefox makes click-to-activate Flash the default

#252

Post by mlinksva »

ultramancool wrote: post #237
mhurron wrote: post #232

Earlier quoted context omitted.

It is getting annoying to have to go into about:config with every release to turn things I don't want off. Off should be default. Let those that want to use these features turn them on if they want. Or better yet, ship a damn extension.

It's a real pain, but they want the less sophisticated users to be able to take advantage of all the latest stuff and if Chrome or IE is shipping with it enabled, they have to compete. Well, that explains WebRTC at least. As for the other stuff... I'm a Pocket user, but I have no idea why that needed to be integrated into the browser, seems like an insane decision to me. I hope they got a good pay day out of that. Sa…

Mozilla got $0 from Pocket. Mindboggling. https://news.ycombinator.com/item?id=9885360

Re: Firefox makes click-to-activate Flash the default

#253

Post by erickhill »

I wonder how the ad networks/agencies will respond to this if it becomes the norm across future competing browsers?

Flash ads (including video) can be horrid on CPUs, but they also often have higher CPMs than static, "cheaper" ads. Firefox seems to be blocking flash entirely. They’re also doing it in a way that the ad networks can’t tell, unlike Chrome. In other words, if I disable Flash in Chrome, the ads normally fall back to (cheaper) non-flash ads. On Firefox, I’m getting blank gray boxes.

For sites that depend on advertising to survive, hopefully the ad networks will update their inventory with alternative non-intrusive ads a.s.a.p. so this type of (admittedly much needed) evolution doesn't suck too many content providers down.

Re: Firefox makes click-to-activate Flash the default

#255

Post by [deleted] »

justizin wrote: post #209
darcyparker wrote: post #169

Earlier quoted context omitted.

Github uses flash for the 'copy to clipboard' button to copy an http or ssh url to the clipboard.

Something I noticed after making my Flash click-to-activate a while back. That seems like a HUMONGOUS tunnel to create in order to allow copy to clipboard, and fairly irresponsible on GitHub's part. What developer doesn't know how to copy to clipboard?

[deleted]

Re: Firefox makes click-to-activate Flash the default

#256

Post by [deleted] »

anon1385 wrote: post #233
acomjean wrote: post #160

Earlier quoted context omitted.

I did the "click to activate" option for flash in firefox. I like it. (Safari and chrome can do this too). This way if flash is activated when really needed. https://support.mozilla.org/en-US/kb/set-adobe-flash-click-p... I feel your pain. The university site I'm working on has flash protein visualizations. We're finally moving visualizations to js. We'll get there, but with flash being kinda turned off, users will h…

It's very important to note that click to play for Flash in Chrome is NOT a security feature. Sites can bypass it. To quote a Chrome developer: "Click to play is not actually a security boundary. In particular, it has always been subject to click-jacking." https://code.google.com/p/chromium/issues/detail?id=174963

[deleted]

Re: Firefox makes click-to-activate Flash the default

#257

Post by mythmon_ »

TheWoodsy wrote: post #146

This is priceless http://i.imgur.com/3uNsIF2.png

Hey, thanks for the headsup. We had an old component that we used as a fallback for certain kinds of videos that was always active. It was a legacy component that just got forgotten. I removed the Flash fallback about half an hour ago, so this shouldn't be showing up anymore.

Re: Firefox makes click-to-activate Flash the default

#258

Post by echeese »

vlunkr wrote: post #225
CmonDev wrote: post #153

Earlier quoted context omitted.

The final act of HTML5 delusion - it becomes "ready" because we say it's "ready". It's just someone forgot to ask Flash (game) developers' opinion. Not that it matters, right?

Haven't all the flash game developers moved on anyways? To either mobile or steam.

Mobile is where a lot of Flash developers have moved (via Adobe Air)

Re: Firefox makes click-to-activate Flash the default

#259

Post by realityking »

gsnedders wrote: post #218
mrec wrote: post #140

Earlier quoted context omitted.

Why? Copy FROM clipboard would be, sure. Copy TO clipboard... OK, I can come up with scenarios where it'd be a problem, but they're pretty far-fetched.

Run a timer overwriting your clipboard every 10ms. Prevent you from copying anything off a webpage and instead replacing it with a copyright notice. Etc., etc., etc.

There's a permission prompt for first use and I think Mozilla considers making it https only.

Re: Firefox makes click-to-activate Flash the default

#260

Post by oldmanjay »

ArtDev wrote: post #235
DavideNL wrote: post #141

Earlier quoted context omitted.

> If you run the popular browsers/plugins against the National Vulnerability Database... That's misusing statistics, you can't determine how secure something is by just summing up the number of vulnerabilities - equally weighing/comparing browsers with a plugin etc. By the way, Apple's opinion on Flash in 2010: Third, there’s reliability, security and performance. Symantec recently highlighted Flash for having one of…

Flash is blocked on Apple devices due to business reasons, nothing more.

Flash is not blocked, it is simply not present.

Also, considering the track record of Flash on Android, your opinion is not supported by historical fact. It is very clear that Adobe is not on the ball to anyone who pays attention.

Post reply on HN