5 ms·

Shame on you Adobe! Yet another hole in Flash, isn't it time to pack up your tent and move onto the dust bin of history? Furthermore it's more shameful to rel

Shame on you Adobe! Yet another hole in Flash, isn't it time to pack up your tent and move onto the dust bin of history? Furthermore it's more shameful to release an update for the manual update users two days after the automatic update users get it. Get over yourselves already. This is already being exploited, push fixes out faster or atleast at the same time. Steve Jobs was so right.

click170 12y ago
They are certainly not going to bin themselves, we have to do it for them. Uninstall flash, and refuse to reinstall it. And see if your nontechy friends and relatives will let you do the same to protect them as well. There are a lot of sites that have multiple streaming options, but when flash is installed it's what they default to.
- testrun 12y ago
  And are you going to bin Apple and Microsoft too? Not going to use USB? Not going to DNS? What hardware and software do you use that had no security flaws in the last year?
  - dandelion_lover 12y ago
    This is not the point. When you definitely can do something, you should do it. Other problems should not distract you from removing this particular software.
onewaystreet 12y ago
>Shame on you [Company]! Yet another hole in [Product], isn't it time to pack up your tent and move onto the dust bin of history? There haven't been many major pieces of software that didn't have at least one major security vulnerability reported in the last year. Apple's products being no exception.
- discardorama 12y ago
  But Adobe's Flash is like a friggin' clown car: vulnerability after vulnerability has been coming out of it for as long as it's been around.
  - AlyssaRowan 12y ago
    I think the same thing would have resulted from almost any closed-source binary parsing remote data deployed on a huge number of different browsers. Flash, Java, and Adobe Reader, present almost uniquely-attractive attack surfaces due to their cross-browser ubiquity as well as their fragility. That isn't making excuses for them, of course, but it gives us an important data point as to what behaviour to avoid in future. (I'm looking at you, Silverlight.)
stonogo 12y ago
adobe flash_player has just under three hundred CVE entries for software flaws. (note to pedants: the NVD search includes GNU bullshit clones if you run a simple search on 'flash player') apple quicktime has over two hundred -- and that's ONLY counting from OS X days (i.e., not including Mac OS days). Writing network-enabled rich-content delivery platforms is a hard task. flash player is installed on a tremendous number of devices across a staggeringly diverse operating system segment. Problems are sadly impossible to avoid. Firefox has more than 1100 -- again, not counting Mozilla days. Chrome has more than a thousand. Safari, commendably, has little more than five hundred. The point is nobody gets it right. Not even Steve Jobs.

click170 12y ago

They are certainly not going to bin themselves, we have to do it for them. Uninstall flash, and refuse to reinstall it. And see if your nontechy friends and relatives will let you do the same to protect them as well. There are a lot of sites that have multiple streaming options, but when flash is installed it's what they default to.

testrun 12y ago
And are you going to bin Apple and Microsoft too? Not going to use USB? Not going to DNS? What hardware and software do you use that had no security flaws in the last year?
- dandelion_lover 12y ago
  This is not the point. When you definitely can do something, you should do it. Other problems should not distract you from removing this particular software.

onewaystreet 12y ago

>Shame on you [Company]! Yet another hole in [Product], isn't it time to pack up your tent and move onto the dust bin of history? There haven't been many major pieces of software that didn't have at least one major security vulnerability reported in the last year. Apple's products being no exception.

discardorama 12y ago
But Adobe's Flash is like a friggin' clown car: vulnerability after vulnerability has been coming out of it for as long as it's been around.
- AlyssaRowan 12y ago
  I think the same thing would have resulted from almost any closed-source binary parsing remote data deployed on a huge number of different browsers. Flash, Java, and Adobe Reader, present almost uniquely-attractive attack surfaces due to their cross-browser ubiquity as well as their fragility. That isn't making excuses for them, of course, but it gives us an important data point as to what behaviour to avoid in future. (I'm looking at you, Silverlight.)

stonogo 12y ago

adobe flash_player has just under three hundred CVE entries for software flaws. (note to pedants: the NVD search includes GNU bullshit clones if you run a simple search on 'flash player') apple quicktime has over two hundred -- and that's ONLY counting from OS X days (i.e., not including Mac OS days). Writing network-enabled rich-content delivery platforms is a hard task. flash player is installed on a tremendous number of devices across a staggeringly diverse operating system segment. Problems are sadly impossible to avoid. Firefox has more than 1100 -- again, not counting Mozilla days. Chrome has more than a thousand. Safari, commendably, has little more than five hundred. The point is nobody gets it right. Not even Steve Jobs.