3 ms·
I can only assume you're just posturing because the size and scope of Flash and the size of scope of Flash's security problems are _way_ beyond just a DRM blob.
by caryhartline 9y ago
I can only assume you're just posturing because the size and scope of Flash and the size of scope of Flash's security problems are _way_ beyond just a DRM blob.
- shakna 9y ago> size of scope of Flash's security problems are _way_ beyond just a DRM blob. Not sure about that, considering the Widevine's CVEs on Android have been quite bad with privelege escalation and sandbox escaping. A bad video can still be enough to burn your system. That's a full security scope right there.
- shakna 9y agoJust the source, because I hate unsourced claims. [0] http://www.cvedetails.com/cve/CVE-2015-6639/ http://www.cvedetails.com/cve/CVE-2015-6639/ - Integrity Impact Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.) It is also worth noting that finding vulnerabilities may be a crime in many jurisdictions [1] (thanks to the DCMA), which would prevent researching coming forward. [1] https://www.eff.org/deeplinks/2016/03/interoperability-and-w3c-defending-future-present https://www.eff.org/deeplinks/2016/03/interoperability-and-w...