2 ms·
> Flash had some security nightmares all the time too if I remember correctly but I dont think it ever screwed me over like Java did. Those incessant RCEs were
by grishka 4y ago
> Flash had some security nightmares all the time too if I remember correctly but I dont think it ever screwed me over like Java did.
Those incessant RCEs were only due to the sloppy way the Adobe Flash player was written. There is nothing bad security-wise inherent to the SWF format itself.
Ruffle is an open source Flash player in Rust, currently under active development. I'm sure it won't have such problems because 1) it's open-source and 2) it's in Rust, and I was told that anything written in Rust can't possibly have any memory-related vulnerabilities; we'll wait and see if this would still hold true if/when they implement JIT compilation for AS3.