Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox makes click-to-activate Flash the default

support.mozilla.org

Post reply on HN
Print view View original

351–360 of 398 posts

Re: Firefox makes click-to-activate Flash the default

#351

Post by enraged_camel »

koonsolo wrote: post #343
marksc wrote: post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

Hi Mark, Technology should be replaced by better technology. To give you some background: I've written games for all kinds of platforms: PocketPC, Windows Mobile, (Desktop) Windows, Linux, OS X, Flash (AS3), HipTop, J2ME devices and some smaller proprietary devices. Some of those platforms offer write once, run everywhere. On other platforms every device has it's own quirks and you have to test on every device and im…

I think I'd rather play your game and have it break on the end boss of level 5 than risk having severe security vulnerabilities in my browser.

Re: Firefox makes click-to-activate Flash the default

#352

Post by nacs »

sethd wrote: post #197
kozukumi wrote: post #50

God will Flash just die already. Firefox is my primary browser and I run it without Flash. On the very odd occasion I need it I have IE in protected mode which has Flash built in. If a site does use Flash I will seek an alternative though as I hate it that much. On a side note Firefox without Flash is so much smoother. IMHO it is the fastest and most stable browser when it doesn't have Flash bogging it down.

Unfortunately Flash still fills a couple gaps in browser support: live video streaming and adaptive bit rate streaming (live or recorded). I posted a similar comment about it the other day: [0] Personally I would like to see HTTP Live Streaming (HLS) [1] implemented in the all the browsers, it's a nice lightweight protocol and would be the path of least resistance since it's already used heavily in the mobile space.…

Agreed. I was looking into this streaming/live video issue as well and there really is no cross platform method of doing this without having a Flash fallback.

For everything else however (like pre-recorded video, games via WebGL), Flash should be phased out.

Re: Firefox makes click-to-activate Flash the default

#353

Post by Pxtl »

robin_reala wrote: post #190
Pxtl wrote: post #137

Earlier quoted context omitted.

Maps straight-up crashes ff for me when zooming.

Have you filed a bug with Mozilla about that? Speed issues are one thing, but crashing is another.

Could never reproduce it consistently, and I'm always hesitent to file a bug without decent repro steps. Also, it seems to have been fixed in latest... maybe. Again, if I can't reproduce it consistently, I can't say if it's fixed or not.

I did go through the crash reporter.

Re: Firefox makes click-to-activate Flash the default

#354

Post by [deleted] »

koonsolo wrote: post #343
marksc wrote: post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

Hi Mark, Technology should be replaced by better technology. To give you some background: I've written games for all kinds of platforms: PocketPC, Windows Mobile, (Desktop) Windows, Linux, OS X, Flash (AS3), HipTop, J2ME devices and some smaller proprietary devices. Some of those platforms offer write once, run everywhere. On other platforms every device has it's own quirks and you have to test on every device and im…

[deleted]

Re: Firefox makes click-to-activate Flash the default

#355

Post by bobajeff »

koonsolo wrote: post #343
marksc wrote: post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

Hi Mark, Technology should be replaced by better technology. To give you some background: I've written games for all kinds of platforms: PocketPC, Windows Mobile, (Desktop) Windows, Linux, OS X, Flash (AS3), HipTop, J2ME devices and some smaller proprietary devices. Some of those platforms offer write once, run everywhere. On other platforms every device has it's own quirks and you have to test on every device and im…

Flash isn't part of the Web. It's not vendor neutral.

If Adobe decides to deprioritise a platform that mean the users of that platform with experience less support in terms of bug fixes, performance and security. If Adobe decides not to support a platform period that means users of that platform are left without a means to access Flash content.

If you are a user this is unacceptable. More importantly these things have already happened.

Re: Firefox makes click-to-activate Flash the default

#356

Post by krapp »

koonsolo wrote: post #343
marksc wrote: post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

Hi Mark, Technology should be replaced by better technology. To give you some background: I've written games for all kinds of platforms: PocketPC, Windows Mobile, (Desktop) Windows, Linux, OS X, Flash (AS3), HipTop, J2ME devices and some smaller proprietary devices. Some of those platforms offer write once, run everywhere. On other platforms every device has it's own quirks and you have to test on every device and im…

Fortunately, an alternative to Flash and HTML5 already exists.

Unfortunately, that alternative is Java applets.

Re: Firefox makes click-to-activate Flash the default

#357

Post by Sanddancer »

marksc wrote: post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

Why isn't Mozilla spending more time to ensure Firefox is using all of the security resources that the OS gives it? Things like ASLR still aren't enabled by default, let alone plugin sandboxing like what exists in Chrome. While Shumway would be nice, having a reliable, secure way to hook into native code would be a lot nicer.

Re: Firefox makes click-to-activate Flash the default

#358

Post by lucianp »

baby wrote: post #350
marksc wrote: post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

This is great. Let's continue: add Tree Style Tab natively

I second this! Tree Style Tab is one of the few addons that I cannot live without. Heck, it is one of the reasons why Firefox is my primary browser. This feature should be made native and the original developer should be rewarded somehow for his efforts.

Re: Firefox makes click-to-activate Flash the default

#360

Post by nkurz »

gmurphy wrote: post #313
nkurz wrote: post #276

I find "Click to Play" makes for a better browsing experience, and think this is a fine move for Firefox. Interestingly, Google Chrome recently moved in the opposite direction, and removed support for having Flash off by default and activating with a single click. Instead, they consider Flash to be "important plug-in content". While they allow you to have it off by default, rather than "click to play", they now requi…

Chrome moved to context click + menu because left click is clickjackable, so doesn't help very much with the security issues.

I've seen this argument, but don't believe that removing the option for click-to-play improves security. I'd could believe this theory if the default was simulataneously changed to have Flash default to off, but as it is, the result is that more users will choose to keep the default where Flash always on. Surely automatic activation is even less secure than a potentially hijackable click-to-play?
Post reply on HN