maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Maemo 5 / Fremantle (https://talk.maemo.org/forumdisplay.php?f=40)
-   -   Flash: worth revisiting with Sept 2011 security updates? (https://talk.maemo.org/showthread.php?t=77439)

JohnLF 2011-09-21 23:04

Flash: worth revisiting with Sept 2011 security updates?
 
Just seen the following about major security updates to Adobe Flash: -
http://nakedsecurity.sophos.com/2011...lnerabilities/ which indicates 6 vulnerabilities patched including one critical one seen used in the wild.

I was wondering if it was worth the effort to re-badger Nokia into supplying an update to fix this flawed piece of software, i.e. provide us with an official Flash v10?

Thoughts on a postcard please...

tzsm98 2011-09-21 23:22

Re: Flash: worth revisiting with Sept 2011 security updates?
 
Quote:

Originally Posted by JohnLF (Post 1093558)
Just seen the following about major security updates to Adobe Flash: -
http://nakedsecurity.sophos.com/2011...lnerabilities/ which indicates 6 vulnerabilities patched including one critical one seen used in the wild.

I was wondering if it was worth the effort to re-badger Nokia into supplying an update to fix this flawed piece of software, i.e. provide us with an official Flash v10?

Thoughts on a postcard please...

It is certainly worth a try. I am doubtful of the success.

Radicalz38 2011-09-22 00:08

Re: Flash: worth revisiting with Sept 2011 security updates?
 
An abandoned thing will always be abandoned. It's more like 3% chance nokia would provide us flash update now. If ever they still plan on retaining flash on their devices they would probably do it on the new generation gadgets. You could already see things happening.


If nokia could even provide update on their side what more for other 3rd party stuffs?

onethreealpha 2011-09-22 00:37

Re: Flash: worth revisiting with Sept 2011 security updates?
 
an interesting idea given the nokia is still legally obligated in a number of countries to contiue support for the N900, including addressing bugfixes and security patches. (yeah yeah i know all about the "wontfix" list)

The n9 doesn't come with flash support, nokia having focussed in full html5 support, along with the whole micro sim, and simplistic UX (for simple people), one might assume the N9 was targetting I-Phone users.

the big issue here is that now, with adobe flash 11 providing "full" support to Android and IOS along with WP7, I question if the decision to leave it off the N9 was another attempt by some at Nokia to further limit it's success in some markets?

I'd guess that nokia will save their Flash investment for the upcoming windows phone handsets and forget the rest.... :(

Tedri Mark 2011-09-22 01:47

Re: Flash: worth revisiting with Sept 2011 security updates?
 
I think the upcoming flashplayer 11 molehill/stage3d content might turn the tide on the whole anti flash backlash...

gerbick 2011-09-22 01:56

Re: Flash: worth revisiting with Sept 2011 security updates?
 
Quote:

Originally Posted by Tedri Mark (Post 1093620)
I think the upcoming flashplayer 11 molehill/stage3d content might turn the tide on the whole anti flash backlash...

I doubt it. Mind you, I'm all about seeing Molehill/Stage3D and improved StageVideo in Flash Player 11, but I'm sure people will say something negative, continue hope for HTML5 as being a full-blown replacement (btw, Pandora's HTML5 player exposes the *.m4a audio files and they can be downloaded without issue) and that everything around Adobe Flash is a waste of time.

JohnLF 2011-09-23 08:29

Re: Flash: worth revisiting with Sept 2011 security updates?
 
I'm not overly hopeful about this either, but I'm thinking if it's considered a critical update by Adobe, and Nokia are still obligated to supporting the N900 then there is an outside chance, especially given the fact that they recently gave a small update regarding the security certificates.

Anyway, I have raised a bug, https://bugs.maemo.org/show_bug.cgi?id=12437 and emailed security@maemo.org as per Andre Klapper's suggestion.

I'm not holding my breath... lol

zdanee 2011-09-23 08:54

Re: Flash: worth revisiting with Sept 2011 security updates?
 
Yeah. New Nokia update. They would likely remove Flash player thus solving the security issue :)
Anyone remember the FireWire security hole? The one when sysadmins were advised to pour hot glue into their servers fw ports because a modified iPod could hack all its way into any system :)

attila77 2011-09-23 10:22

Re: Flash: worth revisiting with Sept 2011 security updates?
 
Quote:

Originally Posted by zdanee (Post 1094370)
Yeah. New Nokia update. They would likely remove Flash player thus solving the security issue :)

That's less funny than it seems, because it *is* the most likely/easiest solution if push came to shove, as apparently a new round of certifications is out of the question.

And, the usual rant - if Adobe really think it's critical, they are more than welcome to release a patch, through Nokia or whatever channel they please, there is nothing stopping them.

towhatend 2011-09-23 10:40

Re: Flash: worth revisiting with Sept 2011 security updates?
 
Hm, the version we got already have some security problems, http://www.adobe.com/support/securit...apsb10-14.html is some of them. I donīt think Nokia will care.


All times are GMT. The time now is 10:14.

vBulletin® Version 3.8.8