Flashplayer

[diif]

Re: Flashplayer

Firefox with Ghostery, Adblock and now Flash Control. In theory my browser should only display the content i want to see without being tracked and without unwanted Flash, adverts or code running where i don't want them.

Interesting article on a couple of the recent 0days https://www.fireeye.com/blog/executi...make_myze.html

Looks like there was three, one in IE also. http://www.theregister.co.uk/2015/07...protestations/

[stj]

Re: Flashplayer

i would be less worried about torrent sites and more concerned about u.s. based news sites.
the amount of cookies, flash, java and other shit on those sites is incredible!

[diif]

Re: Flashplayer

Ghostery stops all that stj.

[momaka]

Re: Flashplayer

Apologies momaka, perhaps idiot was too strong a word

No worries .

Sometimes my skin is even thicker than my head, which I'm sure, sounds hard to believe .

Whilst it might not matter to a home user so much especially if they don't make online purchases, it certainly does to Enterprise IT, where its ITs job amongst other things is to secure against threats and user stupidity. I did this for the last 7 years so this is perhaps why my stance is a little less flexible than yours.

Excellent point.

I thought I mentioned something similar in one of my posts earlier, but I guess I edited it out or just getting delusional now.

Yes, enterprise and home users should be treated differently indeed. When I worked for a short little bit in IT a few years back, we did the same things: regularly updated Java, Flash, and all the rest - usually weekly, if the updates came out. But auto-updating wasn't possible for all software we had: some of it required admin rights to get to certain registry items, and when a regular user tried to update the software, the software wouldn't update all the way and usually error out afterwards. So that's why we regularly disabled auto-updating on most software. I think Java was like that. Flash, on the other hand, had no problems auto-updating.

In general, though, the easiest way to root malware from enterprise PCs is to use software like Deep Freeze or Windows Steady State... or at least was back in the XP days. (I guess I will admit that my knowledge is getting quite outdated now, since WinSS doesn't work with anything newer than Vista, and 32-bit only installations.)

Another is to restrict permissions, giving only limited rights to the user and any software they run.

That's indeed how most enterprises do it. The only downside is that it can be very frustrating sometimes for regular users when they are too limited.

[ivtec]

Re: Flashplayer

I hate flash. What is the best alternative to use according to you guys, besides using an old version like momaka?

you say i hate Flash, what flash you're talking about? most stuff only works on flash,if you're a live streaming lover then you're out of luck ,most stuff requires Flash.
I don't have worries about none of your fears cause what i want is to be able to watch my favorite live soccer games and i install Chrome and don't have to install none flash ,it has its own flash,and i'm happy about it,it seems to me you have to much phobia about flash,do you know if HTTP is any safer or any better.?

[diif]

Re: Flashplayer

you say i hate Flash, what flash you're talking about? most stuff only works on flash,if you're a live streaming lover then you're out of luck ,most stuff requires Flash.
I don't have worries about none of your fears cause what i want is to be able to watch my favorite live soccer games and i install Chrome and don't have to install none flash ,it has its own flash,and i'm happy about it,it seems to me you have to much phobia about flash,do you know if HTTP is any safer or any better.?

Chrome and it's version of flash was also vulnerable to the 0day Flash exploit discovered from the Hacking team disclosure. Enough to escape Chrome's sandbox.
Not a Flash phobia, the risk is real even if you don't realise it.

[ivtec]

Re: Flashplayer

Chrome and it's version of flash was also vulnerable to the 0day Flash exploit discovered from the Hacking team disclosure. Enough to escape Chrome's sandbox.
Not a Flash phobia, the risk is real even if you don't realise it.

Well Life is a risk,anything these days is risky,as they say, if you don't take the risk you don't get it,so i take the risk, specially if it's free:

[mitu_sharma]

Re: Flashplayer

Hello all of you , I am really happy thanks badcaps

[SteveNielsen]

Re: Flashplayer

Well Life is a risk,anything these days is risky,as they say, if you don't take the risk you don't get it,so i take the risk, specially if it's free:

Agreed. Getting out of bed in the morning is a risk.

[SteveNielsen]

Re: Flashplayer

Hello all of you , I am really happy thanks badcaps

https://www.badcaps.net/forum/showthread.php?t=12

[shovenose]

Re: Flashplayer

Agreed. Getting out of bed in the morning is a risk.

Driving is a risk. Taking a shower is a risk. Eating is a risk. Pooping is a risk. But you know what? You gotta do all of those things

[diif]

Re: Flashplayer

Well Life is a risk,anything these days is risky,as they say, if you don't take the risk you don't get it,so i take the risk, specially if it's free:

It's about risk reduction but as you've already been compromised by your free sports site in the past, i guess some users don't want to listen.

[ivtec]

Re: Flashplayer

It's about risk reduction but as you've already been compromised by your free sports site in the past, i guess some users don't want to listen.

Yes i was,but that doesn't keep me from going back to those sites and enjoy my fee favourite live sports streams,despite of a chance of being infected,which doesn't bother me much, how many free live games i watched just to be infected one time maybe a thousand,i think it's worth the risk.

[diif]

Re: Flashplayer

Yes i was,but that doesn't keep me from going back to those sites and enjoy my fee favourite live sports streams,despite of a chance of being infected,which doesn't bother me much, how many free live games i watched just to be infected one time maybe a thousand,i think it's worth the risk.

To say its worth it you first have to understand the risks. Takes less than a second to be compromised and there are far more reasons the bad guys want your PC than just stealing credit card details.

[stj]

Re: Flashplayer

can you watch the streaming sites wih linux? if yes then use a live-disk.

[ivtec]

Re: Flashplayer

can you watch the streaming sites wih linux? if yes then use a live-disk.

I can watch live streaming on both Linux and Win,and on both Google Chrome+add-block Plus does an outstanding job of getting rid of adds that carries malware and virus cause it blocks anything that wants to download on my Pc's,although in Linux i don't need to worry about anything,but in win i have no reason to be afraid so far either,the only time i had problems in win ,it was my fault because this site did not let me to watch their streaming game if i did not deactivate the adblock, so i did and payed the price so lesson learned,never deactivate add-block.

[diif]

Re: Flashplayer

Adblock will only stop malicious adverts. It does nothing to stop other malicious code from running on web pages, nor will it protect you from a compromised OS or exploit kits.

An interesting article on Ars http://arstechnica.co.uk/security/20...g-safe-online/

[eccerr0r]

Re: Flashplayer

Honestly I don't mind cookies that much. I actually wrote a web app (sorry this is private, as in, only I get to use it myself - client and server side) and having cookies made things a lot easier to write, if it weren't impossible without them... Everything else - adobe flash, code trying to run on client side, etc... down with them!

I do have to mention that javascript is something I don't know if I should like or dislike. It clearly should be a "dislike" as it runs on the client side. But in my webapp I use some javascript to change context menus - to add more relevant operations for the particular resource pointed at. I wish that it was not necessary to use javascript for this, but alas it was unavoidable...

[diif]

Re: Flashplayer

Any code that runs on the client side is a danger including JavaScript.
Can't you use HTML5 ?