Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #166204 > unrolled thread
| Started by | Arnoud van der Veer <arnoudvanderveer@yahoo.com> |
|---|---|
| First post | 2016-04-02 19:50 +0200 |
| Last post | 2016-04-11 09:40 +0200 |
| Articles | 20 on this page of 22 — 12 participants |
Back to article view | Back to linux.debian.user
This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by
below is the oldest one visible, not the original post.
What Package? Arnoud van der Veer <arnoudvanderveer@yahoo.com> - 2016-04-02 19:50 +0200
Re: What Package? Jörg-Volker Peetz <jvpeetz@web.de> - 2016-04-02 21:50 +0200
Re: What Package? Adam Wilson <moxalt@riseup.net> - 2016-04-03 18:00 +0200
Re: What Package? Jörg-Volker Peetz <jvpeetz@web.de> - 2016-04-03 20:50 +0200
Re: What Package? David Wright <deblis@lionunicorn.co.uk> - 2016-04-03 23:50 +0200
Re: What Package? The Wanderer <wanderer@fastmail.fm> - 2016-04-04 15:20 +0200
Re: What Package? kamaraju kusumanchi <raju.mailinglists@gmail.com> - 2016-04-03 05:50 +0200
Re: What Package? Adam Wilson <moxalt@riseup.net> - 2016-04-03 18:00 +0200
Re: What Package? Siard <shiems146@kpnplanet.nl> - 2016-04-03 18:40 +0200
Re: What Package? John Hasler <jhasler@newsguy.com> - 2016-04-03 20:10 +0200
Re: What Package? Harris Paltrowitz <harris1nyc@gmail.com> - 2016-04-03 20:50 +0200
Re: What Package? John Hasler <jhasler@newsguy.com> - 2016-04-03 21:00 +0200
Re: What Package? Adam Wilson <moxalt@riseup.net> - 2016-04-03 21:00 +0200
Re: What Package? Mark Fletcher <mark27q1@gmail.com> - 2016-04-04 15:40 +0200
Re: What Package? Stefan Monnier <monnier@iro.umontreal.ca> - 2016-04-04 16:30 +0200
Re: What Package? Adam Wilson <moxalt@riseup.net> - 2016-04-04 17:10 +0200
Re: What Package? Mark Fletcher <mark27q1@gmail.com> - 2016-04-06 16:10 +0200
Re: What Package? Adam Wilson <moxalt@riseup.net> - 2016-04-09 18:40 +0200
Re: What Package? Curt <curty@free.fr> - 2016-04-10 18:00 +0200
Re: What Package? Harris Paltrowitz <harris1nyc@gmail.com> - 2016-04-11 01:00 +0200
Re: What Package? The Wanderer <wanderer@fastmail.fm> - 2016-04-11 03:10 +0200
Re: What Package? Curt <curty@free.fr> - 2016-04-11 09:40 +0200
Page 1 of 2 [1] 2 Next page →
| From | Arnoud van der Veer <arnoudvanderveer@yahoo.com> |
|---|---|
| Date | 2016-04-02 19:50 +0200 |
| Subject | What Package? |
| Message-ID | <rjxQm-7hp-7@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Hello, I am having problems with playing flash files while using Iceweasel in Debian.Iam using Debian for about 4 weeks now and have never been able to play flash files: unknown SWF file. (flash player plugin crashes) Bit of a pain really: uploaded a movie to youtube today, in order to look at it on Youtube I had to refer to a computer with Windows installed since i cannot watch anything in Iceweasel on Youtube (and many other websites) using Debian.Please let me know what package this concerns so that I can file a bugreport. I do not succeed in this since I do not know what package this involves, although I have tried to file in a bug report. Thanks, kind regards, Arnoud van der Veer, the Netherlands
[toc] | [next] | [standalone]
| From | Jörg-Volker Peetz <jvpeetz@web.de> |
|---|---|
| Date | 2016-04-02 21:50 +0200 |
| Message-ID | <rjzIt-hH-3@gated-at.bofh.it> |
| In reply to | #166204 |
Hi, in order to watch youtube movies: first, try iceweasel without flash-plugin (disable or even un-install the plugin) and after removing any cookies from youtube; (maybe you feel more motivated to do that after reading this article titled "Flash – Low-hanging fruit for attackers | Business Security Insider by F-Secure" https://business.f-secure.com/have-you-disabled-flash-yet/ ;-) second, with the command-line program youtube-dl (package of the same name) movies can be downloaded from youtube and played by a movie-player, e.g., vlc. Regards, jvp.
[toc] | [prev] | [next] | [standalone]
| From | Adam Wilson <moxalt@riseup.net> |
|---|---|
| Date | 2016-04-03 18:00 +0200 |
| Message-ID | <rjSBs-5EU-11@gated-at.bofh.it> |
| In reply to | #166207 |
[Multipart message — attachments visible in raw view] — view raw
On Sat, 2 Apr 2016 21:45:15 +0200 Jörg-Volker Peetz <jvpeetz@web.de> wrote: > Hi, > > in order to watch youtube movies: > > first, try iceweasel without flash-plugin (disable or even un-install the > plugin) and after removing any cookies from youtube; > (maybe you feel more motivated to do that after reading this article titled > "Flash – Low-hanging fruit for attackers | Business Security Insider by > F-Secure" https://business.f-secure.com/have-you-disabled-flash-yet/ ;-) > > second, with the command-line program youtube-dl (package of the same name) > movies can be downloaded from youtube and played by a movie-player, e.g., vlc. You do not need to do this. YouTube works without Flash.
[toc] | [prev] | [next] | [standalone]
| From | Jörg-Volker Peetz <jvpeetz@web.de> |
|---|---|
| Date | 2016-04-03 20:50 +0200 |
| Message-ID | <rjVfY-7G8-9@gated-at.bofh.it> |
| In reply to | #166273 |
Adam Wilson wrote on 04/03/16 17:53: > On Sat, 2 Apr 2016 21:45:15 +0200 > Jörg-Volker Peetz <jvpeetz@web.de> wrote: > >> Hi, >> >> in order to watch youtube movies: >> >> first, try iceweasel without flash-plugin (disable or even un-install the >> plugin) and after removing any cookies from youtube; >> (maybe you feel more motivated to do that after reading this article titled >> "Flash – Low-hanging fruit for attackers | Business Security Insider by >> F-Secure" https://business.f-secure.com/have-you-disabled-flash-yet/ ;-) >> >> second, with the command-line program youtube-dl (package of the same name) >> movies can be downloaded from youtube and played by a movie-player, e.g., vlc. > > You do not need to do this. YouTube works without Flash. > Yes, should have said "possibilities" instead of "in order". Regards, jvp.
[toc] | [prev] | [next] | [standalone]
| From | David Wright <deblis@lionunicorn.co.uk> |
|---|---|
| Date | 2016-04-03 23:50 +0200 |
| Message-ID | <rjY49-197-1@gated-at.bofh.it> |
| In reply to | #166273 |
On Sun 03 Apr 2016 at 18:53:26 (+0300), Adam Wilson wrote: > On Sat, 2 Apr 2016 21:45:15 +0200 > Jörg-Volker Peetz <jvpeetz@web.de> wrote: > > second, with the command-line program youtube-dl (package of the same name) > > movies can be downloaded from youtube and played by a movie-player, e.g., vlc. > > You do not need to do this. YouTube works without Flash. I *always* do this. Why pay for the bandwidth twice, thrice,... That's the one benefit of flash refraining from playing immediately the link is clicked on. This is one reasong why I asked (in another thread) what is happening behind the scenes when you play the "same" movie in HTML5. Is there a file involved? Cheers, David.
[toc] | [prev] | [next] | [standalone]
| From | The Wanderer <wanderer@fastmail.fm> |
|---|---|
| Date | 2016-04-04 15:20 +0200 |
| Message-ID | <rkcAa-3vK-21@gated-at.bofh.it> |
| In reply to | #166309 |
[Multipart message — attachments visible in raw view] — view raw
On 2016-04-03 at 17:42, David Wright wrote: > On Sun 03 Apr 2016 at 18:53:26 (+0300), Adam Wilson wrote: > >> On Sat, 2 Apr 2016 21:45:15 +0200 Jörg-Volker Peetz >> <jvpeetz@web.de> wrote: >> >>> second, with the command-line program youtube-dl (package of the >>> same name) movies can be downloaded from youtube and played by a >>> movie-player, e.g., vlc. >> >> You do not need to do this. YouTube works without Flash. > > I *always* do this. Likewise. > Why pay for the bandwidth twice, thrice,... That's the one benefit of > flash refraining from playing immediately the link is clicked on. In addition to the multiple-bandwidth-use consideration, pulling it down locally means you can choose what player to use, rather than being limited to whatever features and UI are provided by the streaming site's built-in player. That, combined with buffering issues (we may still have been on dial-up at the time, I don't recall for certain), is the major reason why I adopted a strict rule of "always pull down locally before watching" for my own computers - with the only exception being realtime, live streams. -- The Wanderer The reasonable man adapts himself to the world; the unreasonable one persists in trying to adapt the world to himself. Therefore all progress depends on the unreasonable man. -- George Bernard Shaw
[toc] | [prev] | [next] | [standalone]
| From | kamaraju kusumanchi <raju.mailinglists@gmail.com> |
|---|---|
| Date | 2016-04-03 05:50 +0200 |
| Message-ID | <rjHcZ-5IW-5@gated-at.bofh.it> |
| In reply to | #166204 |
On Sat, Apr 2, 2016 at 1:28 PM, Arnoud van der Veer <arnoudvanderveer@yahoo.com> wrote: > Hello, > > I am having problems with playing flash files while using Iceweasel in > Debian. > Iam using Debian for about 4 weeks now and have never been able to play > flash files: unknown SWF file. (flash player plugin crashes) > Bit of a pain really: uploaded a movie to youtube today, in order to look at > it on Youtube I had to refer to a computer with Windows installed since i > cannot watch anything in Iceweasel on Youtube (and many other websites) > using Debian. > Please let me know what package this concerns so that I can file a > bugreport. I do not succeed in this since I do not know what package this > involves, although I have tried to file in a bug report. > > Thanks, kind regards, Arnoud van der Veer, the Netherlands I am able to play videos on youtube.com in iceweasel using the following set of packages. % dpkg -l \*iceweasel\* \*flash\* | grep ^ii | grep -v l10n ii flashplugin-nonfree 1:3.6.1 amd64 Adobe Flash Player - browser plugin ii iceweasel 38.7.1esr-1~deb8u1 amd64 Web browser based on Firefox ii iceweasel-vimperator 3.8.2-2 all Iceweasel extension to make it have vim look and feel ii libhal1-flash 0.3.2-dmo2+bp1 amd64 Compatibility library to allow playback of flash DRM content and my sources.list is % stuff.pl /etc/apt/sources.list deb http://ftp.us.debian.org/debian/ jessie main contrib non-free deb-src http://ftp.us.debian.org/debian/ jessie main contrib non-free deb http://ftp.debian.org/debian/ jessie-updates main contrib non-free deb-src http://ftp.debian.org/debian/ jessie-updates main contrib non-free deb http://security.debian.org/ jessie/updates main contrib non-free deb-src http://security.debian.org/ jessie/updates main contrib non-free thanks raju -- Kamaraju S Kusumanchi | http://raju.shoutwiki.com/wiki/Blog
[toc] | [prev] | [next] | [standalone]
| From | Adam Wilson <moxalt@riseup.net> |
|---|---|
| Date | 2016-04-03 18:00 +0200 |
| Message-ID | <rjSBs-5EU-31@gated-at.bofh.it> |
| In reply to | #166204 |
[Multipart message — attachments visible in raw view] — view raw
On Sat, 2 Apr 2016 17:28:52 +0000 (UTC) Arnoud van der Veer <arnoudvanderveer@yahoo.com> wrote: > I am having problems with playing flash files while using Iceweasel in Debian.Iam using Debian for about 4 weeks now and have never been able to play flash files: unknown SWF file. (flash player plugin crashes) Being able to open and play SWF files has nothing to do with your web browser. Try install GNU Gnash, a free flash player, by running the following: # apt-get install gnash You should then be able to open SWF files using Gnash. > Bit of a pain really: uploaded a movie to youtube today, in order to look at it on Youtube I had to refer to a computer with Windows installed since i cannot watch anything in Iceweasel on Youtube (and many other websites) using Debian. Which version of Iceweasel are you using? I am using 38.7.1esr-1~deb8u1, and I can watch YouTube videos without Flash. I would recommend uninstalling your Flash plugin, so that it does not interfere with YouTube's HTML5 video player.
[toc] | [prev] | [next] | [standalone]
| From | Siard <shiems146@kpnplanet.nl> |
|---|---|
| Date | 2016-04-03 18:40 +0200 |
| Message-ID | <rjTeb-6bQ-37@gated-at.bofh.it> |
| In reply to | #166204 |
Arnoud van der Veer wrote: > i cannot watch anything in Iceweasel on Youtube First, go to www.youtube.com/html5 and set YouTube's HTML5 player to be used wherever possible. This setting is stored in a cookie. Then, for those cases where html5 is not yet available, UNinstall flashplayer-nonfree. Adobe has stopped Linux support for it, so it's too old for those cases that require a newer version. Instead, install pepperflashplugin-nonfree. Whenever a flash video does not work in iceweasel, you can view it in chromium. But if you also install browser-plugin-freshplayer-pepperflash, then you can view them in iceweasel as well as other NPAPI web browsers such as seamonkey and the new vivaldi browser.
[toc] | [prev] | [next] | [standalone]
| From | John Hasler <jhasler@newsguy.com> |
|---|---|
| Date | 2016-04-03 20:10 +0200 |
| Message-ID | <rjUDg-7ps-13@gated-at.bofh.it> |
| In reply to | #166280 |
Siard writes: > But if you also install browser-plugin-freshplayer-pepperflash, then > you can view them in iceweasel as well as other NPAPI web browsers > such as seamonkey and the new vivaldi browser. I just tried that. It "worked", but the load went above three and Firefox quit responding. Might be ok if you have a modern computer. -- John Hasler jhasler@newsguy.com Elmwood, WI USA
[toc] | [prev] | [next] | [standalone]
| From | Harris Paltrowitz <harris1nyc@gmail.com> |
|---|---|
| Date | 2016-04-03 20:50 +0200 |
| Message-ID | <rjVfY-7G8-11@gated-at.bofh.it> |
| In reply to | #166280 |
On Apr 3, 2016, at 12:29 PM, Siard <shiems146@kpnplanet.nl> wrote: Then, for those cases where html5 is not yet available, UNinstall flashplayer-nonfree. Adobe has stopped Linux support for it, so it's too old for those cases that require a newer version. -------------------------- Hi, So if Adobe is no longer supporting Flash for Linux, do you think there might be security risks to using the flashplayer-nonfree package? -Harris
[toc] | [prev] | [next] | [standalone]
| From | John Hasler <jhasler@newsguy.com> |
|---|---|
| Date | 2016-04-03 21:00 +0200 |
| Message-ID | <rjVpD-7JP-7@gated-at.bofh.it> |
| In reply to | #166291 |
Harris writes: > So if Adobe is no longer supporting Flash for Linux, do you think > there might be security risks to using the flashplayer-nonfree > package? Any malware involved would be targeted at Windows. Nobody targets Linux desktops. -- John Hasler jhasler@newsguy.com Elmwood, WI USA
[toc] | [prev] | [next] | [standalone]
| From | Adam Wilson <moxalt@riseup.net> |
|---|---|
| Date | 2016-04-03 21:00 +0200 |
| Message-ID | <rjVpE-7JP-13@gated-at.bofh.it> |
| In reply to | #166291 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, 3 Apr 2016 14:49:15 -0400 Harris Paltrowitz <harris1nyc@gmail.com> wrote: > On Apr 3, 2016, at 12:29 PM, Siard <shiems146@kpnplanet.nl> wrote: > > Then, for those cases where html5 is not yet available, UNinstall > flashplayer-nonfree. Adobe has stopped Linux support for it, so it's > too old for those cases that require a newer version. > -------------------------- > > Hi, > > So if Adobe is no longer supporting Flash for Linux, do you think > there might be security risks to using the flashplayer-nonfree > package? The discussion of "security" in non-free software is something of a meaningless distinction, since non-free software is compromised by default. Adobe Flash was always evil- if this perceived "insecurity" is enough to help make people want to stop using it, then by all means it should be promoted.
[toc] | [prev] | [next] | [standalone]
| From | Mark Fletcher <mark27q1@gmail.com> |
|---|---|
| Date | 2016-04-04 15:40 +0200 |
| Message-ID | <rkcTx-3Fi-37@gated-at.bofh.it> |
| In reply to | #166296 |
[Multipart message — attachments visible in raw view] — view raw
On Mon, Apr 4, 2016, 3:56 AM Adam Wilson <moxalt@riseup.net> wrote: > > The discussion of "security" in non-free software is something of a > meaningless distinction, since non-free software is compromised by > default. Adobe Flash was always evil- if this perceived "insecurity" is > enough to help make people want to stop using it, then by all means it > should be promoted. > I wish we could get a clear statement of what all the fuss is about re Flash. A complete stranger's unsupported assertion that Flash is evil just doesn't cut it. And shouting louder by repeating the statement over and over again, as some on this forum have done in the past, doesn't cut it either. There are evidently serious flaws in Flash, either its design or its implementation, that warrant all the negativity, but the odd thing is that the clear technical unbiased treatment of the issue seems to be completely swamped by quasi religious fervour. Those of us who haven't seen the facts, now can't find them. Can anyone point to anything unbiased that explains the issue? (I hope it's clear I am not trying to deny there is an issue here) Mark >
[toc] | [prev] | [next] | [standalone]
| From | Stefan Monnier <monnier@iro.umontreal.ca> |
|---|---|
| Date | 2016-04-04 16:30 +0200 |
| Message-ID | <rkdFU-4hl-17@gated-at.bofh.it> |
| In reply to | #166352 |
> There are evidently serious flaws in Flash, either its design or its
> implementation, that warrant all the negativity, but the odd thing is that
> the clear technical unbiased treatment of the issue seems to be completely
> swamped by quasi religious fervour. Those of us who haven't seen the facts,
> now can't find them. Can anyone point to anything unbiased that explains
> the issue?
It's resolutely and staunchly proprietary.
So, you can't know what it really does, the user has no control over it.
Using it grants control of your computer to Adobe, fundamentally.
Obviously, it's not the only proprietary program, so the reason why it's
so despised is that it's one of the very few proprietary programs that
lots and lots of people "need" in order to do "ordinary activities",
such as buy some tickets on-line.
I used to stay away from sites that used Flash for this reason (and it
came with added benefit that many ads were using flash, so a browser
without flash support also automatically skipped lots of ads).
Then I got by using Gnash. And nowadays I'm back to "no flash" because
flash-only sites are rare enough again (and many sites actually work
better if I don't have any flash player, actually, than if I have Gnash
installed).
Of course, now that flash is being replaced with Javascript, we're
learning about the other nasty part: the problem was not just that the
flash player was proprietary, but also that the flash code (now the
javascript code) downloaded from the internet is itself proprietary.
And even when it's Free Software, it's terribly difficult to benefit
from that freedom (i.e. it can be difficult to find the actual source
code (rather than its minified version), and it's even harder to be
able to use a modified version of it).
Stefan
[toc] | [prev] | [next] | [standalone]
| From | Adam Wilson <moxalt@riseup.net> |
|---|---|
| Date | 2016-04-04 17:10 +0200 |
| Message-ID | <rkeiC-4U2-15@gated-at.bofh.it> |
| In reply to | #166352 |
[Multipart message — attachments visible in raw view] — view raw
On Mon, 04 Apr 2016 13:36:17 +0000
Mark Fletcher <mark27q1@gmail.com> wrote:
> On Mon, Apr 4, 2016, 3:56 AM Adam Wilson <moxalt@riseup.net> wrote:
>
> >
> > The discussion of "security" in non-free software is something of a
> > meaningless distinction, since non-free software is compromised by
> > default. Adobe Flash was always evil- if this perceived
> > "insecurity" is enough to help make people want to stop using it,
> > then by all means it should be promoted.
> >
>
> I wish we could get a clear statement of what all the fuss is about re
> Flash. A complete stranger's unsupported assertion that Flash is evil
> just doesn't cut it. And shouting louder by repeating the statement
> over and over again, as some on this forum have done in the past,
> doesn't cut it either.
From the standpoint of ethics, Flash is most certainly unethical
(evil), since it violates the right of people to have freedom, to
control their own lives, and to control their own computing without
having some other party pushing us around and preventing us from having
true possession of the things we own.
When I call Flash evil, I am not referring to its design, but rather to
its nature in a system of ethics. It may be very well designed, for all
I care, but a benevolent dictatorship is still a dictatorship, and
should still be opposed.
> There are evidently serious flaws in Flash, either its design or its
> implementation, that warrant all the negativity,
Design and implementation or secondary to licensing- a free license is
necessary for us to even understand and study the design in the first
place. This means that it can be quite hard to understand the design
issues, and what we do know about the design and operation of non-free
programs is the result of deduction rather than open study, as should
be the case.
However, these arguments are probably falling on deaf ears. I shall
thus follow on to some secondary injustices caused by the primary
injustice (non-free software).
> but the odd thing is
> that the clear technical unbiased treatment of the issue seems to be
> completely swamped by quasi religious fervour. Those of us who
> haven't seen the facts, now can't find them. Can anyone point to
> anything unbiased that explains the issue?
I think that in this case, the distinction between a biased and an
unbiased source is somewhat irrelevant. Sources discussing Flash which
point out that it is malware will most certainly be hostile to Flash
and Adobe- sources defending Flash will be friendly to Flash and Adobe.
"Neutral" sources (such as they exist) discuss things more from a web
standards viewpoint rather than a discussion of the program in itself.
Flash is malware because:
It uses resilient "supercookies" (LSOs) to track users. Adobe has gone
out of its way to make these hard to get rid of- they are specifically
designed to weasel their way around browser cookie settings. (1)
Many pieces of Adobe's non-free software report back to Adobe
("checking in") every thirty days, disrupting people's work. The only
way to disable this feature is to stay disconnected from the internet.
(2)
Adobe Flash implements device fingerprinting which is used to track
users- information which can then, of course, be given to other
agencies (...). (3)
Adobe has implemented and been aggressively been pushing DRM in Flash,
which is grief for honest end-users (4), restricts access to
information, and doesn't even move additional product (5). (6)
Flash causes vendor dependence; the completeness of its public
specifications is debatable, and no complete implementation of Flash is
publicly available in source form with a license that permits re-use,
so writing a free replacement is difficult. This is bad because open
formats are what make a format re-implementable- as a result, there is
not a single free implementation of Flash which is anywhere near usable
on the modern web. (7) (8) (9) (10)
Using Flash breaks conventions associated with normal HTML pages. (11)
(12) (13)
From Wikipedia: For many years Adobe Flash Player's security
record (14) has led many security experts to recommend against
installing the player, or to block Flash content. (15) (16) The
US-CERT recommends blocking Flash (17). Security researcher Charlie
Miller recommended "not to install Flash". (18) As of February 12,
2015, Adobe Flash Player has over 400 CVE entries (19), of which over
300 lead to arbitrary code execution, and past vulnerabilities have
enabled spying via web cameras. (20) (21) (22) (23) Security experts
have long predicted the demise of Flash, saying that with the rise of
HTML5 "....the need for browser plugins such as Flash is diminishing",
(24) yet a significant proportion of websites still use it. (25) (26)
(1)
http://www.imasuper.com/2008/10/09/flash-cookies-the-silent-privacy-killer
(2) http://shallowsky.com/blog/gimp/non-free-software-surprises.html
(3)
http://arstechnica.com/security/2013/10/top-sites-and-maybe-the-nsa-track-users-with-device-fingerprinting
(4)
http://www.eff.org/deeplinks/2008/01/2008-drm-continues-punish-paying-customers
(5) http://www.fistfulayen.com/blog/?p=127
(6) https://www.eff.org/deeplinks/2008/02/adobe-pushes-drm-flash
(7) https://en.wikipedia.org/wiki/Adobe_Flash#Vendor_dependence
(8) http://news.zdnet.com/2424-3515_22-199508.html
(9) https://www.youtube.com/watch?v=juer_YCitJE&t=11m50s
(10) https://www.youtube.com/watch?v=aYNLYIDZN48&t=22m52s
(11) http://www.useit.com/alertbox/20050711.html
(12) http://www.useit.com/alertbox/20001029.html
(13) http://www.skillsforaccess.org.uk/howto.php?id=101
(14) https://www.adobe.com/support/security/#flashplayer
(15) http://news.cnet.com/8301-27080_3-10396326-245.html
(16)
http://www.zdnet.com/protect-yourself-from-flash-attacks-in-internet-explorer-7000003921
(17) http://www.us-cert.gov/reading_room/securing_browser
(18)
http://www.oneitsecurity.it/01/03/2010/interview-with-charlie-miller-pwn2own
(19)
http://www.cvedetails.com/product/6761/Adobe-Flash-Player.html?vendor_id=53
(20)
http://www.h-online.com/security/news/item/Adobe-remedies-webcam-spy-hole-in-Flash-1364631.html
(21)
http://www.h-online.com/security/news/item/Flash-Player-as-a-spy-system-1073161.html
(22)
http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html
(23)
http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager02.html
(24)
http://www.sophos.com/en-us/medialibrary/PDFs/other/sophossecuritythreatreport2013.pdf
(25)
http://w3techs.com/technologies/history_overview/client_side_language/all
(26)
http://www.fastcompany.com/3049920/tech-forecast/the-agonizingly-slow-decline-of-adobe-flash-player
Read this: https://en.wikipedia.org/wiki/Adobe_Flash_Player#Security.
There's more there, and I can't really be bothered to go on.
Just DuckDuckGo "adobe flash spying" or something to that effect.
[toc] | [prev] | [next] | [standalone]
| From | Mark Fletcher <mark27q1@gmail.com> |
|---|---|
| Date | 2016-04-06 16:10 +0200 |
| Message-ID | <rkWjE-52m-29@gated-at.bofh.it> |
| In reply to | #166364 |
[Multipart message — attachments visible in raw view] — view raw
On Tue, Apr 5, 2016 at 12:06 AM Adam Wilson <moxalt@riseup.net> wrote: > > There's more there, and I can't really be bothered to go on. > > > Thanks, that is the first time I have seen the whole story pulled together in one place. Clearly an alternative to Flash is desirable -- I wonder if we are really there yet. HTML5 implementation in for example iceweasel in Jessie, as well as what I have in Google Chrome on my Android tablet, seems a bit basic -- can't for example make the video full-screen as there doesn't seem to be a screen gadget to do that. Maybe this is a specific player on a specific site, but I thought the idea behind HTML5 was to standardise such things? Maybe there's a key combination but how does one know that? And stability seems to be a problem, I've seen a couple of videos that don't play all the way through with an HTML5 player but switch to Flash and it works... I'd like to see the back of Flash, for all the reasons you've cited, but it seems you have to _really_ care to make the compromises necessary to do that right now. Anyway, we've wandered away from the topic a little now, which is my fault, so apologies for that. Mark
[toc] | [prev] | [next] | [standalone]
| From | Adam Wilson <moxalt@riseup.net> |
|---|---|
| Date | 2016-04-09 18:40 +0200 |
| Message-ID | <rm45t-7Ve-23@gated-at.bofh.it> |
| In reply to | #166466 |
[Multipart message — attachments visible in raw view] — view raw
On Wed, 06 Apr 2016 14:08:16 +0000 Mark Fletcher <mark27q1@gmail.com> wrote: > On Tue, Apr 5, 2016 at 12:06 AM Adam Wilson <moxalt@riseup.net> wrote: > > > > > There's more there, and I can't really be bothered to go on. > > > > > > Thanks, that is the first time I have seen the whole story pulled > > together > in one place. > > Clearly an alternative to Flash is desirable -- I wonder if we are > really there yet. HTML5 implementation in for example iceweasel in > Jessie, as well as what I have in Google Chrome on my Android tablet, > seems a bit basic -- can't for example make the video full-screen as > there doesn't seem to be a screen gadget to do that. The HTML5 player is only as good as the website implementing the standard wants to make it- YouTube's HTML5 player, for instance, is excellent, and so is the Vimeo player, as well as countless others. The *reference implementation* so to speak is also good (the player used by the web browser when playing a video file directly in the browser, such as: http://audio-video.gnu.org/video/short--undated--rms--free-software-four-freedoms.ogv). > Maybe this is a > specific player on a specific site, but I thought the idea behind > HTML5 was to standardise such things? Maybe there's a key combination > but how does one know that? And stability seems to be a problem, I've > seen a couple of videos that don't play all the way through with an > HTML5 player but switch to Flash and it works... > > I'd like to see the back of Flash, for all the reasons you've cited, > but it seems you have to _really_ care to make the compromises > necessary to do that right now. What compromises? I don't use Flash, and I haven't experienced any significant discomfort- it isn't a big sacrifice to make. Few websites (or at least the websites I visit) require it, and those that do I avoid. The only ones I can think of off the top of my head are some of the mainstream news sites, but then they're mostly shit anyway. I went through a phase of running LibreJS and not even allowing non-free JavaScript to run. *That* is hard- getting rid of Flash is nothing compared to getting rid of most JavaScript. Running non-free JavaScript is one of the compromises I am prepared to make- but I draw the line at Flash.
[toc] | [prev] | [next] | [standalone]
| From | Curt <curty@free.fr> |
|---|---|
| Date | 2016-04-10 18:00 +0200 |
| Message-ID | <rmpWi-7iY-7@gated-at.bofh.it> |
| In reply to | #166561 |
On 2016-04-09, Adam Wilson <moxalt@riseup.net> wrote: > > Running non-free JavaScript is one of the compromises I am prepared to > make- but I draw the line at Flash. > Those that do still use it (Flash) should upgrade to the newest version (which I believe is 11.2.202.616) as they've recently fixed some critical vulnerabilities (on 4-7-2016). -- Hypertext--or should I say the ideology of hypertext?--is ultrademocratic and so entirely in harmony with the demagogic appeals to cultural democracy that accompany (and distract one’s attention from) the ever-tightening grip of plutocratic capitalism. - Susan Sontag
[toc] | [prev] | [next] | [standalone]
| From | Harris Paltrowitz <harris1nyc@gmail.com> |
|---|---|
| Date | 2016-04-11 01:00 +0200 |
| Message-ID | <rmwuJ-3SR-1@gated-at.bofh.it> |
| In reply to | #166590 |
On Apr 10, 2016, at 11:56 AM, Curt <curty@free.fr> wrote: Those that do still use it (Flash) should upgrade to the newest version (which I believe is 11.2.202.616) as they've recently fixed some critical vulnerabilities (on 4-7-2016). ----------------------------- Any idea whether the package "flashplugin-nonfree" is being updated in the same way?"
[toc] | [prev] | [next] | [standalone]
Page 1 of 2 [1] 2 Next page →
Back to top | Article view | linux.debian.user
csiph-web