Archive for Adobe

Bye Bye Flash! – Part 2: What About Porn And Surveys?

Posted in Commentary with tags , on February 9, 2015 by itnerd

I’ve gotten a lot of reaction to my post about punting Adobe Flash from my system over the month of February to see what happens. One of those was from a reader who was concerned about his porn watching habits:

Hello IT Nerd. Seeing as you’re a guy, I figured that you’d be able to tell me if the fact that you’ve you’ve removed Flash from your computer affect your ability to watch porn online. 

Thank you. 

First off, I don’t watch porn online. In fact, I can’t remember the last time I watched porn online or otherwise. But the question intrigued me as I bet that a lot of people use their computers to watch porn. Thus I replied to his e-mail and got a list of sites to test:

  • Xhamster
  • PornTube
  • Tube8
  • PornHub

Each of these sites from what I can tell allows you to watch content for free, and watch better content for a fee. Now when I tested my computer against these sites, I was able to watch content without Flash being installed. Only one of them mentioned that I was missing Flash, but it provided a link that allowed me to play the content anyway. And all of the content played in HTML5. Thus apparently, my rather unscientific experiment suggests that you do not need Flash to view porn online. That didn’t exactly come as a shock to me as I wrote a story about four years ago about one of the biggest names in porn was moving away from Flash. Thus it seems that it would be logical that others would follow.

Now onto my second question:

Hello, I belong to two online survey panels that pay me to take surveys. If I delete Flash as you suggest, will I still be able to take surveys as some of the invitations that I get specifically mention the need for Flash?

Any advice is appreciated. 

I e-mailed this person back and got the names of three companies that do this sort of thing:

  • Ipsos Reid
  • Web Perspectives
  • Asking Canadians

They’re all reputable names in that industry. Thus in the interests of answering this question, I signed up to them and within a few days, I got invitations to surveys that I could take. Of the three sites that I looked at, only one had a requirement for Flash. That one was Asking Canadians. The other two didn’t require Flash and any “rich content” worked fine. So that would imply that if Asking Canadians has a survey that has a video that requires Flash, you can’t take it. Now I should note that the other two survey groups host surveys from third parties. Thus it is possible that you might get a survey that requires Flash that way.

Other than those major questions, it’s been smooth sailing without Flash. I have yet to find a hiccup of any sort that would have required me to re-install Flash. Thus I will continue with this experiment to see what happens. One other thing. If I do need to use Flash, I still have it installed in my virtual machines that run Windows. Thus just like Java, if I do need to use it, I can do so in a low risk environment where any potential damage can be contained inside that environment.

Tune in next week to see an update on how I’m doing without Flash.

 

Bye Bye Adobe Flash!

Posted in Commentary with tags , on February 2, 2015 by itnerd

Frequent readers of this blog will know that I am no fan of Adobe Flash. It’s a CPU hog, a battery hog, and a security threat given how often you have to update it to avoid getting exploited by something. The last time I had a piece of software that was this much of a problem was when I had Java on my system. I dumped that and haven’t looked back since. So I’ve been musing doing the same with Flash. Given that YouTube has recently moved into the HTML5 camp, I decided to take the plunge and dump Adobe Flash. Over the next month, I will document my attempt to get rid of Flash once and for all. Let’s start with actually dumping Flash. Now Adobe does make uninstallers to make dumping Flash easy:

If you’re on a Mac, click here.

If you’re on a PC, click here.

In my case, I followed the instructions for Mac and within two minutes, Flash was gone. Now the question is, is my web surfing experience lacking because I don’t have Flash?

Not so far.

I browsed to my usual websites and found no differences in my web surfing experience. So far, that implies that you don’t need flash to surf the Internet. Now one thing that I did notice is that Safari which according to OS X Yosemite used “significant energy” when I had Flash installed no longer does. Not only that, battery life while running Safari is way over 7 hours which I have never seen on my MacBook Pro before and my CPU usage has dropped so much that it rarely crossed 4%. I guess that proves that everything that Steve Jobs said all those years ago.

This is promising so far.

Check back next week to see how I’m doing and if I am running into any difficulty by not having Adobe Flash on my system.

 

YouTube Moves Away From Flash…. Flash Is Doomed?

Posted in Commentary with tags , , on January 29, 2015 by itnerd

I have to admit that I do not like Flash. It’s insecure and power hungry. And I thought that long before the late Steve Jobs said so. So the news that YouTube is moving away from Flash is something that I really, really like:

Four years ago, we wrote about YouTube’s early support for the HTML5 <video> tag and how it performed compared to Flash. At the time, there were limitations that held it back from becoming our preferred platform for video delivery. Most critically, HTML5 lacked support for Adaptive Bitrate (ABR) that lets us show you more videos with less buffering.

Over the last four years, we’ve worked with browser vendors and the broader community to close those gaps, and now, YouTube uses HTML5 <video> by default in Chrome, IE 11, Safari 8 and in beta versions of Firefox.

The benefits of HTML5 extend beyond web browsers, and it’s now also used in smart TVs and other streaming devices. 

With YouTube moving away from Flash, it means that Flash is likely doomed because others will copy YouTube’s move . And finally, I will have a reason not to have Flash on my computer which will take away one attack vector from the bad guys and make my computer perform better.

 

Here We Go Again: Update Adobe Flash Now Due To Threat That’s In The Wild

Posted in Commentary with tags on January 26, 2015 by itnerd

In case you’re not aware, there’s two pieces of software that are horribly insecure. The first is Java which I have removed from my Macs a long time ago and I have relegated to being only inside my virtual PCs where an attack via Java can do no real harm. The second is Adobe Flash which I wish I could get rid of entirely because of it’s now epic lack of being secure. However that isn’t possible at this time due to the number of websites that require it for any number of reasons. This was reinforced this weekend by Adobe releasing an updated version of Flash and urging users to update ASAP.  Here are the key facts:

  • The attack in question is a drive-by-download that leverages this Flash vulnerablity. Meaning that you hit a website and it downloads code to your system to do evil things to it.
  • This vulnerability in Flash is being actively exploited as I type this.
  • Flash versions up to and including 16.0.0.287 on OS X and Windows and 11.2.202.438 on Linux are susceptible to the attack.
  • Adobe is also working with Google to update the embedded version of Flash included in the Chrome browser.
  • Standalone installers should be available this week.

Instructions for enabling automatic updates or manually updating Flash can be found here. I strongly suggest that you do so at your earliest opportunity.

Here We Go Again: You Should Update Flash NOW To Stop An Active Threat

Posted in Commentary with tags , on July 9, 2014 by itnerd

Unless you run Google Chrome or Internet Explorer 11 (as they automatically update Flash), you need to immediately update Adobe Flash to stop a specific threat that was documented by Adobe. In short, the threat allows someone to craft a SWF file that could steal users’ log-on credentials to services on the Web, including Twitter, eBay, Instagram and Tumblr. Now, this isn’t just theory. A Google Security Engineer named Michele Spagnuolo released an exploit-crafting tool as a proof of concept that allows one to easily create SWF files that do this sort of evil. Now he did alert his employer and Adobe privately along with giving a heads up to Twitter, eBay, Instagram and Tumblr before releasing the tool. Thus they’ve all fixed this. But you need to do your part and download this Flash update to keep yourself safe because you can bet that someone is going to (if they haven’t already done so) take what this Google employee did and turn it into something very, very bad.

This begs the question: Seeing as there’s been two other emergency Flash updates this year, one has to conclude that Flash is not all that secure. Thus is it not time that Adobe has to step up its game in terms of security? Or conversely computer users have to start considering how to wean themselves off of Flash to ensure that they are safe when surfing the net?

 

Chinese Hackers “Pwn” Safari And Flash At Pwn2Own Contest

Posted in Commentary with tags , , on March 14, 2014 by itnerd

Every year, the hacking community has gathered at the Pwn2Own event In Vancouver to show off their hacking skills in exchange for cash. This year a pair of Chinese hackers are making news for hacking Safari and Flash. Here’s the details as posted by Threat Post:

Fang Jiahong and Liang Chen represented the Keen Team at Pwn2Own on Thursday, starting off the second day of the annual exploit festival with a quick takedown of Apple’s Safari browser. They then wrapped up the contest with a successful zero-day exploit of Adobe Flash, the second time the Adobe product was toppled.

What should get your attention is the fact that the hackers were able to vulnerabilities in OS X Mavericks and Webkit (which is part of Safari) to bypass the security that is built into Safari. What should also get your attention is this:

“I think the Webkit fix will be relatively easy,” Chen said. “The system-level vulnerability is related to how they designed the application; it may be more difficult for them.”

Apple was present for this contest and they have been made aware of the details of how this happened. Thus it’s likely that the next update to Mavericks which is already under testing will contain a fix for this. If you’re wondering about details of the Flash hack, I can’t find any.

Oh, if you’re wondering what they got for doing this, the Safari hack scored them $40,000 and the Flash hack scored them $75,000. They said they will donate a portion of their winnings to charities representing the families of the missing Malaysian Airlines flight MH370. Nice.

Adobe Announces Another Emergency Flash Update

Posted in Commentary with tags on February 20, 2014 by itnerd

Adobe today announced for the second time this month an emergency update for Flash. This update addresses a threat that could allow an attacker to take control of an affected system, executing malicious code. The vulnerability (CVE-2014-0502) has already been exploited. Apparently at least three nonprofit organizations according to security firm FireEye (via ArsTechnica) have been hacked using this exploit.

Now you can grab the update here. But doesn’t this seem like the Java circus that was happening last year? Doesn’t it make you want to consider dumping Flash? I know I am considering it.

 

Adobe Says Install Flash Update NOW

Posted in Security with tags on February 4, 2014 by itnerd

I don’t see this everyday.

Adobe today released a “priority 1” update to Flash that the company recommends that you install within the next 72 hours to protect your computer. From what you may ask? Apparently, an attacker could take control of your system remotely. Here’s what the company said:

Adobe has released security updates for Adobe Flash Player 12.0.0.43 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.335 and earlier versions for Linux. These updates address a critical vulnerability that could potentially allow an attacker to remotely take control of the affected system.

Adobe is aware of reports that an exploit for this vulnerability exists in the wild, and recommends users update their product installations to the latest versions

You can get the latest Flash Player here. I’d update now if I were you.

 

Adobe Suffers Massive Security Breach

Posted in Commentary with tags , on October 4, 2013 by itnerd

I’ll hit the highlights. Or low lights if you’re Adobe. Hackers broke into their network and the net result is as follows:

  • Source code for an as-yet undetermined number of software titles was stolen. This includes its ColdFusion Web application platform, and possibly its Acrobat family of products.
  • Nearly three million customer credit card records,
  • Login data for an undetermined number of Adobe user accounts.

A statement about these incidents can be found here and here. A separate customer security alert for users affected by this breach is here.

Needless to say, this is not good. If you have an Adobe user account, I would be looking at the security alert and take the steps that they suggest as this breach cannot be taken lightly.

Flash On Mobile Devices Dead: Report [UPDATED]

Posted in Commentary with tags , on November 9, 2011 by itnerd

ZDNN is reporting that Adobe’s attempts to bring Flash to smartphones and tablets may be dead and buried:

Sources close to Adobe that have been briefed on the company’s future development plans have revealed this forthcoming announcement to ZDNet:

Our future work with Flash on mobile devices will be focused on enabling Flash developers to package native apps with Adobe AIR for all the major app stores. We will no longer adapt Flash Player for mobile devices to new browser, OS version or device configurations. Some of our source code licensees may opt to continue working on and releasing their own implementations. We will continue to support the current Android and PlayBook configurations with critical bug fixes and security updates.

Additionally, the e-mail briefing to Adobe’s partners has been summed up as follows:

  • Adobe is Stopping development on Flash Player for browsers on mobile.

Given how much noise they made about wanting Flash on iDevices in particular, this is a stunning turnaround. Assuming this is true, they will move to HTML5 support which basically means that they are adopting the Apple view of the universe. ZDNN says that this is going to be announced today. I’ll be watching to see if that’s the case.

UPDATE: It’s now official. Flash is dead on mobile devices.