3 ms·
Chrome really needs to stop bundling this garbage. Even with whatever Google magic attached to flash, its still a very dangerous plugin, if not the most danger
by drzaiusapelord 11y ago
Chrome really needs to stop bundling this garbage. Even with whatever Google magic attached to flash, its still a very dangerous plugin, if not the most dangerous. There was just a CVE for the version previous to this one. And the one before that. Its an endless treadmill.
This should be a wake-up call to make flash non-default and, if installed, click-to-play only. Its time we started treating it like Java. Like Java, its clear its owner can't secure it. I imagine its borderline unmaintainable spaghetti code at this point.
Its also very hypocritical of Google, who has taken issue with SSL encryption levels and NPAPI, to be bundling what's essentially the second largest malware vector in browser history, only behind Java. This SHOULD be our wake-up call.
- bitmapbrother 11y agoJava Applets a bigger malware attack vector than IE / ActiveX ? Additionally, it was Flash that was compromised, not Pepper. There's a distinction.