Flash on Flash

[Lsbcal]

Adobe Flash seems to have had a problem. Updates are urged to avoid ransomware. See this article:

http://krebsonsecurity.com/2016/04/adobe-patches-flash-player-zero-day-threat/#more-34432

Adobe said a “critical” bug exists in all versions of Flash including Flash versions 21.0.0.197 and lower (older) across a broad range of systems, including Windows, Mac, Linux and Chrome OS. Find out if you have Flash and if so what version by visiting this link.

In a security advisory, the software maker said it is aware of reports that the vulnerability is being actively exploited on systems running Windows 7 and Windows XP with Flash Player version 20.0.0.306 and earlier.

 

[audreyh1]

We uninstalled Flash on all our computers over a year ago. It's just too dangerous.

 

[ERD50]

On my Linux system (Xubuntu 14.04), it looks like I have the "Pepper Flash Player - browser plugin" installed.

The "adobe-flashplugin" shows as 'Not Installed'.

I'm not sure if that means this is not a concern for me?

-ERD50

 

[easysurfer]

Better lucky than good. I'm on Win 10.

 

[Totoro]

Flash has a history of troubles like this. Why I haven't installed it.

Also, it avoids certain types of ads.

 

[redduck]

What is the disadvantage of not having Flash working with Windows 7?

 

[walkinwood]

We uninstalled Flash on all our computers over a year ago. It's just too dangerous.

+1

If I absolutely need to see flash content, I load up IE or chrome which have implemented their own renderers. Most of the time, I just move on.

 

[target2019]

Flash content is blocked in my browser until I click on the video. I may update a few times each year.

 

[Sunset]

What is the disadvantage of not having Flash working with Windows 7?

I'm wondering that too, is it just that you miss out on youtube and the news site videos ?

 

[easysurfer]

What is the disadvantage of not having Flash working with Windows 7?

I'd also ask, what are viable alternative flash software to Adobe Flash for those that wish to stay away from the risk?

 

[audreyh1]

I'd also ask, what are viable alternative flash software to Adobe Flash for those that wish to stay away from the risk?

Few websites use flash anymore. It tends to be the legacy stuff. I do fine without it. I'm on a Mac but I doubt that makes a difference.

 

[Lsbcal]

Since we discussed Adobe Flash in a previous thread about 6 months ago, I set the "ask to activate" in my Firefox plugin. Here is a simple way to proceed in Firefox: https://support.mozilla.org/en-US/kb/set-adobe-flash-click-play-firefox

It seems maybe a few times a week I click on the link to allow Flash to activate and view the contents. I don't know if I'd be out of luck should I just uninstall Flash.

 

[target2019]

I'd also ask, what are viable alternative flash software to Adobe Flash for those that wish to stay away from the risk?

As a consumer of Flash, you're limited to the file format sent to your browser from the web site. As LSBCAL mentions, if you use Firefox, there is a builtin way to block the Flash, until you ok playback.

Each browser you use may have a different approach.

 

[Calico]

Since we discussed Adobe Flash in a previous thread about 6 months ago, I set the "ask to activate" in my Firefox plugin. Here is a simple way to proceed in Firefox: https://support.mozilla.org/en-US/kb/set-adobe-flash-click-play-firefox

It seems maybe a few times a week I click on the link to allow Flash to activate and view the contents. I don't know if I'd be out of luck should I just uninstall Flash.

Thank you for the link. I just used it to disable Flash in Mozilla, and then did the same in my other browsers. Better safe than sorry.

 

[easysurfer]

As a consumer of Flash, you're limited to the file format sent to your browser from the web site. As LSBCAL mentions, if you use Firefox, there is a builtin way to block the Flash, until you ok playback.

Each browser you use may have a different approach.

Thanks for the info. For me I use Maxthon as the browser and looks like it uses Adobe Flash. But from the original post, looks like I'm okay (as of now) with Win 10 as the OS.

 

[Totoro]

I'm wondering that too, is it just that you miss out on youtube and the news site videos ?

youtube is html5, so that's ok. Most major news site videos also switched over. Not all of them.

So in general you are fine. Much different from the late nineties!

 

[GrayHare]

Note that enabling "Click to activate" may not offer full protection since 1) the browser might start downloading the video before displaying it, and 2) the virus may exploit a weakness in that downloading process.

 

[Totoro]

Which browsers download before 'click to activate'? Would surprise me if that opens up any vulnerability.

Just curious (and also to warn my friends).

 

[eytonxav]

I had installed flash for some reason a while back, and now can no longer remember the reason, so I uninstalled on my iMac.

 

[GrayHare]

Which browsers download before 'click to activate'? Would surprise me if that opens up any vulnerability.

I don't know, but the browser's Flash plugin might begin to download content so that it has something to show as soon as you click Play or Activate. Many virii exploit a software's weakness for unexpected data, and such an exploit could easily be placed at the start of the content, the portion buffered in advance of Play or Activate. I don't know this is a risk in this particular case, but the remediation advice suggested upgrading not merely "avoid activating".