Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

New Adobe Flash 0day, have a nice weekend

adobe.com

Post reply on HN
Print view View original

31–40 of 74 posts

Re: New Adobe Flash 0day, have a nice weekend

#31

Post by jsz0 »

pan69 wrote: post #12

I've seen Adobe do quite a few security announcements over the years but I've never actually seen any of the exploits in action or explained. I'm really curious how serious these exploits really are and if they are actually practical (or more theoretical). Any references greatly appreciated.

They're practical. The biggest one I can remember was attacking WoW players by posting links to forums to sites with Flash banner ads that utilized an exploit to install a key logger and some other nasty stuff. The classic fake Flash update tactic is wildly successful also which of course isn't a Flash problem but just a side effect of users expecting to install/update browser plugins and becoming oblivious to the risks.

Re: New Adobe Flash 0day, have a nice weekend

#32

Post by jstevens85 »

DMiner wrote: post #23
[deleted] wrote: post #22

Earlier quoted context omitted.

[deleted]

I wish your comment was a fact. But Apple is a business and they have business interests when it comes to these outsider platforms. My understanding is that Apple doesnt allow Java ,Silverlight , Qt or any of those, because these platforms could gradually in-signify the need for a walled garden of apps. App Store is a real cash cow with a lot of potential and Apple clearly doesnt want to purge it off(and that is a go…

>App Store is a real cash cow with a lot of potential and Apple clearly doesnt want to purge it off

What evidence do you have to back up your claim? If it were true that Apple is making a profit from the App Store, then wouldn't there exist an opportunity for Android Marketplace to undercut Apple's App Store?

When it comes to smartphones, Google cares only about marketshare. More Android apps guarantees more Google searches, and therefore more opportunities to serve advertising. One factor preventing Google from attaining more marketshare is the huge range of quality apps that exists for the iPhone. If it were true that a 30% cut of app revenue enabled Google to make a significant profit, wouldn't they reduce their cut in an effort to try and attract more developers?

>The rendering framerate is very low and is almost not usable.

This problem will disappear in a couple of years as mobile processors become faster and JS engines improve.

Re: New Adobe Flash 0day, have a nice weekend

#33

Post by mukyu »

pan69 wrote: post #12

I've seen Adobe do quite a few security announcements over the years but I've never actually seen any of the exploits in action or explained. I'm really curious how serious these exploits really are and if they are actually practical (or more theoretical). Any references greatly appreciated.

http://chargen.matasano.com/chargen/2007/7/3/this-new-vulner...

Re: New Adobe Flash 0day, have a nice weekend

#34

Post by JoachimSchipper »

rmorrison wrote: post #6

Adobe has desensitized me to updating their software, since every time I open Acrobat it asks me to download a new version. It's like the boy who cried wolf, but since this sounds serious maybe I'll get over this mental hurdle.

Actually, every time you open Acrobat it's had a new security issue. At least, it's that way for me (though Windows is not my primary OS, so I don't open Acrobat that often).

Re: New Adobe Flash 0day, have a nice weekend

#36

Post by oscardelben »

gmlk wrote: post #28

Yesterday I removed flash from my Mac Internet Plugins folder. I can't say I'm missing it. Nearly all website work, a lot of ads are gone. Strangely, html5/h.264 is often the fall back for flash, I really would wish they did that the other wise around.

You could give http://clicktoflash.com/ a try

Re: New Adobe Flash 0day, have a nice weekend

#37

Post by andrewtj »

gmlk wrote: post #28

Yesterday I removed flash from my Mac Internet Plugins folder. I can't say I'm missing it. Nearly all website work, a lot of ads are gone. Strangely, html5/h.264 is often the fall back for flash, I really would wish they did that the other wise around.

That made me curious so I removed Flash from /Library/Internet\ Plug-Ins/ and rebooted. I'm unable to play video on either Vimeo or YouTube so I'll be sticking with Click to Flash for the moment.

Re: New Adobe Flash 0day, have a nice weekend

#39

Post by Tichy »

gojomo wrote: post #29

They suggest addressing the Flash vulnerability by installing the prerelease 10.1 version, which "does not appear to be vulnerable". But the first step of installing 10.1 (on Windows and MacOS) is to run an uninstaller, also available on the download page: http://labs.adobe.com/downloads/flashplayer10.html Perhaps the prudent should stop after that uninstall step, for safety from other future exploits, as well.

Also, I couldn't find any other way to uninstall Flash on OS X to begin with.

Re: New Adobe Flash 0day, have a nice weekend

#40

Post by tuacker »

Tichy wrote: post #38

Sorry for my ignorance, but is there still no way to watch YouTube and other videos without Flash? I thought some browsers would ship with suitable codecs and be able to play them directly?

Visit http://www.youtube.com/html5 and join the beta. It won't work for all videos though and not at all for embedded videos.
Post reply on HN