51–60 of 109 posts
Earlier quoted context omitted.
Why Typescript, out of curiosity?
In part, the team just wanted to experiment with TypeScript. Also, the language is syntactically similar to AS3 so there is a close mapping from the AS3 library APIs to Shumway's TypeScript implementation.
Earlier quoted context omitted.
Yes, definitely! SWF obfuscators are a problem because they rely on undocumented behavior and implementation details of the Flash plugin that the Shumway developers must debug and support to maintain compatibility. Obfuscated AS1 code can do strange things like jumping to unaligned SWF addresses in the middle of bytecodes.
> Obfuscated AS1 code can do strange things like jumping to unaligned SWF addresses in the middle of bytecodes. Oh, I've seen much worse. The AS1 VM actually treats the entire SWF file (after decompression) as an AS program. That means it's possible to jump outside of the bytecode tag and into e.g. the metadata of a JPEG file.
(This is something that is still not fixed in Gnash, so Shumway is certainly farther along.)
Earlier quoted context omitted.
Do you fear that by the time shumway actually works for "most ppl stuff" flash would already be gone and the effort wasted? (its gone from YT..)
It's not gone from YT! It's certainly on its way out. But despite the announcement I still see Flash as default in Firefox and even in Chrome it sometimes falls back to Flash (happens to me when I start a video, put my laptop to sleep, and continue the video after resume).
I'm a program manager on Mozilla's Shumway team. If you have any questions, please ask! :) The name "Shumway" is derived from "Gordon Shumway", the actual name of the TV character ALF: Flash -> Flash Gordon -> Gordon Shumway -> Shumway. :) Shumway is written in TypeScript. It has an ActionScript interpreter and a JIT that generates JavaScript, compiled using eval(). The code is on GitHub: https://github.com/mozilla/s…
I have a question! >Shumway needs H.264 video decoders that may not be available on Windows XP or Linux. Is that a reason for Linux users to be annoyed, or just something that happened and will be corrected soon?
EDIT: It looks like Linux support shipped in FF26 as long as GStreamer supports it: https://bugzilla.mozilla.org/show_bug.cgi?id=794282#c101
Windows XP is still left out – they use DirectShow for MP3 (https://bugzilla.mozilla.org/show_bug.cgi?id=861693) but using it for H.264 would require a licensed plugin which few people have and while OpenH.264 is available, it doesn't support the Main & High profiles used for most video on the web (it's been focused on streaming): https://bugzilla.mozilla.org/show_bug.cgi?id=799318#c57
I'm a program manager on Mozilla's Shumway team. If you have any questions, please ask! :) The name "Shumway" is derived from "Gordon Shumway", the actual name of the TV character ALF: Flash -> Flash Gordon -> Gordon Shumway -> Shumway. :) Shumway is written in TypeScript. It has an ActionScript interpreter and a JIT that generates JavaScript, compiled using eval(). The code is on GitHub: https://github.com/mozilla/s…
I'm a program manager on Mozilla's Shumway team. If you have any questions, please ask! :) The name "Shumway" is derived from "Gordon Shumway", the actual name of the TV character ALF: Flash -> Flash Gordon -> Gordon Shumway -> Shumway. :) Shumway is written in TypeScript. It has an ActionScript interpreter and a JIT that generates JavaScript, compiled using eval(). The code is on GitHub: https://github.com/mozilla/s…
Sounds like Shumway is already further along than Gnash or Lightspark. What versions of SWF does Shumway aim to support? 7, 8, 9, 10, all of the above? How does Shumway interact with click-to-play and similar mechanisms to stop unwanted Flash objects from playing? Does it have that functionality built-in?
Shumway is implementing APIs as needed, not targeting a specific SWF version. Shumway does not currently support click-to-play because it is not a real browser plugin. It hooks into Firefox's click-to-play mechanism to conditionally override the Flash plugin. This is a hack and will soon be replaced with "jsplugins", a Firefox feature that will allow browser plugins to be written in JS and run in an out-of-process sa…
Earlier quoted context omitted.
Shumway is implementing APIs as needed, not targeting a specific SWF version. Shumway does not currently support click-to-play because it is not a real browser plugin. It hooks into Firefox's click-to-play mechanism to conditionally override the Flash plugin. This is a hack and will soon be replaced with "jsplugins", a Firefox feature that will allow browser plugins to be written in JS and run in an out-of-process sa…
Will this be more secure than Adobe's Flash, since that already runs in a separate process?
Same process isolation, but the JS plugin got a vastly reduced surface to attack.
Only somewhat related, but is there still no way to access the clipboard in a web app without flash?
It would NEVER be safe to Ctrl+V again!