4 ms·

I'm a bit confused about the title of this post. The actual title of the blog post is "Security Updates Available for Adobe Flash Player (APSB16-08)". The curre

by jtokoph 11y ago

I'm a bit confused about the title of this post. The actual title of the blog post is "Security Updates Available for Adobe Flash Player (APSB16-08)". The current HN link text is “Adobe is aware of a report that CVE-2016-1010 is being actively exploited”. I can't help but think that the HN post has that title to give the impression that Adobe knows about an issue and isn't fixing it. But isn't this blog post an announcement about patches that have be deployed for people to install and Adobe included that line to emphasize the importance of the patch?

dvfjsdhgfv 11y ago
I think the intention here is to make people realize they should have disabled Flash a long time ago and use it only for a limited number of critical whitelisted websites (like banking sites built on Air). If you do otherwise, you're increasing the risk of being a victim of a malicious attack.
- novaleaf 11y ago
  FUD is FUD, and this is preaching to the choir anyway.
- enzanki_ars 11y ago
  Out of curiosity, what bank do you know of that uses Air? That seems like a bank that someone should never use if they value security.
  - dvfjsdhgfv 11y ago
    https://www.adobe.com/showcase/casestudies/raiffeisen/casestudy.pdf https://www.adobe.com/showcase/casestudies/raiffeisen/casest... Marketed by Adobe as a "success story" - the customers are a bit less happy.
planckscnst 11y ago
Wow, I can see it way now. I had first imagined a community of loyal Adobe fans wondering why Adobe hasn't addressed CVE-whatever-is-up-today and getting pitch-forky. I saw the title as a response to that: in the tone of "Yeah, folks, Adobe knows. Here's the fix, now calm the fuck down."
ovi256 11y ago
The HN link text seems to be taken from [1], which contains the CVE id. [1] https://helpx.adobe.com/security/products/flash-player/apsb16-08.html https://helpx.adobe.com/security/products/flash-player/apsb1...

by jtokoph 11y ago

dvfjsdhgfv 11y ago

I think the intention here is to make people realize they should have disabled Flash a long time ago and use it only for a limited number of critical whitelisted websites (like banking sites built on Air). If you do otherwise, you're increasing the risk of being a victim of a malicious attack.

novaleaf 11y ago
FUD is FUD, and this is preaching to the choir anyway.
enzanki_ars 11y ago
Out of curiosity, what bank do you know of that uses Air? That seems like a bank that someone should never use if they value security.
- dvfjsdhgfv 11y ago
  https://www.adobe.com/showcase/casestudies/raiffeisen/casestudy.pdf https://www.adobe.com/showcase/casestudies/raiffeisen/casest... Marketed by Adobe as a "success story" - the customers are a bit less happy.

planckscnst 11y ago

Wow, I can see it way now. I had first imagined a community of loyal Adobe fans wondering why Adobe hasn't addressed CVE-whatever-is-up-today and getting pitch-forky. I saw the title as a response to that: in the tone of "Yeah, folks, Adobe knows. Here's the fix, now calm the fuck down."

ovi256 11y ago

The HN link text seems to be taken from [1], which contains the CVE id. [1] https://helpx.adobe.com/security/products/flash-player/apsb16-08.html https://helpx.adobe.com/security/products/flash-player/apsb1...