Live data from Hacker News

Firefox makes click-to-activate Flash the default

support.mozilla.org

211–220 of 398 posts

Re: Firefox makes click-to-activate Flash the default

#211

Earlier quoted context omitted.

You really think the opinion of game developers should matter in a discussion about how to make browsers reasonably secure for people to use without getting their hosts compromised? Because I don't. Anger towards browser developers or HTML5 is misplaced; you should be angry with Adobe for the fact that Flash is buggy, insecure, and closed-source.

>You really think the opinion of game developers should matter in a discussion about how to make browsers reasonably secure for people to use without getting their hosts compromised? Because I don't. I agree, which is why I wish browser vendors would block WebGL by default. I'm not holding my breath though, because the reality is that market demand from people like game developers (or at least, perceived demand) is w…

WebGL is about more than games, for sure, why would you want to block acceleration?

You can go into add-ons and make it click-to-activate like flash, however.

Re: Firefox makes click-to-activate Flash the default

#212
post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

This is great. Let's continue: remove pocket, remove hello

I wouldn't mind these two as assumed business decisions. But please stop the hypocrisy. It's just hurting Mozilla image without fooling anyone.

Re: Firefox makes click-to-activate Flash the default

#213

When all browsers disable Flash, a ton of old artistic content will become unaccessible. I'm thinking specifically about Homestuck animations and minigames, but other people will have their own favorites. Is there a good transition plan?

However, it will also make it more secure by making it less of a target for hackers. If you have to enable it only for certain content … then great. That’s how it should be at this point. Look at what happened to Java applets.

Java Applets are hard to run on many machines (apple machines are especially bad in this respect), even for technically skilled users.

It would be very sad to see this become the state of all the old flash games/animations.

Re: Firefox makes click-to-activate Flash the default

#214
post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

This is great. Let's continue: remove pocket, remove hello

Hello is just few (hundred?) lines of Javascript giving UI to WebRTC.

Unless you want to remove WebRTC and that's just stupid.

Re: Firefox makes click-to-activate Flash the default

#215

When all browsers disable Flash, a ton of old artistic content will become unaccessible. I'm thinking specifically about Homestuck animations and minigames, but other people will have their own favorites. Is there a good transition plan?

This is the biggest issue IMO. Seeing flash go the way of DOS and etc. would be very sad.

Re: Firefox makes click-to-activate Flash the default

#216

Earlier quoted context omitted.

> We need a real open-source alternative to flash player. We quietly built the alternative to Flash over the last 10 years. It's called the web. A standard document in the web browser can play audio, video, display vector graphics, utilise OpenGL, supports direct drawing via Canvas, and it is deeply scriptable with a mature, open programming language. What else do you need?

> What else do you need? I need all of those things to look exactly the same in each and every browser, instead of corrupted icons or broken navigation because the developer tested it in Chrome for Windows but neglected, say, Iceweasel for Debian. I have yet to find a non-flash game capable of doing that. And if the alternative is "we should discard this closed binary that works in every platform in favor of this fre…

> because the developer tested it in Chrome for Windows but neglected, say, Iceweasel for Debian.

Bad example, because Flash for Linux has been discontinued in all flavours except PPAPI so it wouldn't work in Iceweasel.

Re: Firefox makes click-to-activate Flash the default

#217
post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

When is the formal EOL for Firefox? It's my primary browser, but some people hate it, so just thought I'd ask when the EOL for Firefox is?

Flash is never blocked for me in Firefox and never will be. Because a few months back I did this:

1. about:config 2. extensions.blocklist.enabled - 'false'

Job done. No more Mozilla annoyances between me and the content I wish to access. And yes, it was an annoyance because the link to "check for updates" in your message would not get me anywhere. That was a flaw in your strategy that I now suspect was deliberate. I really can't respect engineered annoyances that align with agendas rather than good UX.

I like Flash when it's done well. Raw performance and efficiency is one of the things I like about it. The powerful multimedia handling of everything from audio to video cannot be matched by HTML5. I'm an HTML/CSS/JS dev for my living for 20 years, that's how I know this to be true.

HTML5 video is cute. But it doesn't cut the mustard in all circumstances.

360 video, VR, and many other things will come along that are too much for web technologies to handle. Flash serves a useful purpose in allowing websites to cater to the most demanding cutting edge tech and content without needing the Firefoxes and Chromes of the world to keep up.

"closed source"; "battery drain"; "plugins are just bad".... oh cry me a river.

My comment has reached EOL.

Re: Firefox makes click-to-activate Flash the default

#218
post #140

Earlier quoted context omitted.

Isn't this like a huge security risk?

Why? Copy FROM clipboard would be, sure. Copy TO clipboard... OK, I can come up with scenarios where it'd be a problem, but they're pretty far-fetched.

Run a timer overwriting your clipboard every 10ms. Prevent you from copying anything off a webpage and instead replacing it with a copyright notice. Etc., etc., etc.

Re: Firefox makes click-to-activate Flash the default

#219
post #198

Mark from Mozilla here. To be clear, by "blocked" Flash we really mean enforced click-to-activate. User choice is always a #1 priority at Mozilla. We regularly block vulnerable plugins. What made this block different was that we did it before Adobe made an update available. Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox. However, we're glad to see…

For what it's worth, the shumway racing AS3 demo appeared to work but froze all input like closing or switching tabs for me and I had to kill it with task manager. Windows 8.1, Firefox 39.0.
Post reply on HN