Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Saturday December 31 2016, @11:15AM   Printer-friendly
from the not-quite-so-flash dept.

Back in August Adobe reversed its decision to stop offering an NPAPI Flash plugin for Linux and promised that version 23 would come Penguinistas' way real soon now.

At the time the decision was greeted with surprise, because Adobe had not thought to update Flash for Linux since 2012's version 11.2. But the company decided that Linux users deserved a security upgrade to the infamously hole-ridden product.

It turns out the company fibbed, because it's now delivered version 24 of the plugin to Linux users, making this a thirteen-version jump between releases*.

That's the same version number offered to Windows and Mac users, but the new Linux version lacks features found on those other platforms. Linux users willing to put up with almost-certainly-insecure** will therefore have to put up with missing 3D acceleration from GPUs.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 4, Interesting) by JoeMerchant on Saturday December 31 2016, @01:51PM

    by JoeMerchant (3937) on Saturday December 31 2016, @01:51PM (#447843)

    Flash was, and in some ways still is, the "easy" way to embed video in web pages. There's still a lot of content out there, lazy static website devs, clueless bespoke live video solutions, and some enterprises that hold back browser updates 5+ years for their idea of "security," such that Flash is basically the only solution to reach that ready to be fossilized enterprise, which is still paying millions a year for their video solutions and demanding they be done compatible with IE -4.0 on their Windows NT and some 98 (fully updated with service pack 2, of course) systems.

    I "kept up" with Adobe Flash updates in detail for a period of about 6 months, every single "security" update they pushed during that time was, at its core, DRM shell games. Some hackers in Eastern Europe would open up BBC content so it could be viewed out of region, so Adobe would push one of a dozen or so proprietary scheme switches out as the "latest security patch," and break the hackers decoding scheme. Two weeks later, the hackers would figure out what Adobe had done and release another decoder, two weeks after that, Adobe would push another "security patch."

    TLDR: Flash security updates are mostly not about protecting the home user's PC, they're about changing the locks for DRM protected content from big providers who detect that their video is being consumed by persons not authorized to do so.

    --
    🌻🌻 [google.com]
    Starting Score:    1  point
    Moderation   +2  
       Insightful=1, Interesting=1, Total=2
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   4  
  • (Score: 0) by Anonymous Coward on Saturday December 31 2016, @01:58PM

    by Anonymous Coward on Saturday December 31 2016, @01:58PM (#447845)

    The actual security exploits in flash are pretty dumb and amateurish too. Such as using a signed integer as the scene index without a lower bounds check.

  • (Score: 2) by Pino P on Saturday December 31 2016, @02:26PM

    by Pino P (4721) on Saturday December 31 2016, @02:26PM (#447848) Journal

    Is there yet a workable solution for authoring and playing vector animations that involves no Adobe products?

    • (Score: 2) by art guerrilla on Saturday December 31 2016, @02:59PM

      by art guerrilla (3082) on Saturday December 31 2016, @02:59PM (#447857)

      teevee ?

    • (Score: 0) by Anonymous Coward on Saturday December 31 2016, @04:38PM

      by Anonymous Coward on Saturday December 31 2016, @04:38PM (#447878)

      Well, there is Gnash, which despite not having a release in over four years is still seeing some development: http://git.savannah.gnu.org/cgit/gnash.git/log/ [gnu.org]

  • (Score: 0) by Anonymous Coward on Saturday December 31 2016, @02:56PM

    by Anonymous Coward on Saturday December 31 2016, @02:56PM (#447856)

    For some fucked up reason Netflix uses silverlight
    Seriously, WTF

    • (Score: 3, Funny) by JoeMerchant on Saturday December 31 2016, @10:14PM

      by JoeMerchant (3937) on Saturday December 31 2016, @10:14PM (#447956)

      To the Empire theme:

      DRM DRM DRM DRM drm DRM DRM drm DRM

      --
      🌻🌻 [google.com]
  • (Score: 0) by Anonymous Coward on Saturday December 31 2016, @06:47PM

    by Anonymous Coward on Saturday December 31 2016, @06:47PM (#447909)

    browser vendors still don't support playing rtsp directly in browser via html5 video. they're too busy arguing about whether they are socialist enough or how better to screw their users. so surveillance cams use flash or windows plugins or you can needlessly transcode each stream with ffmpeg, etc. that's fine with a cam or two at 720p. not so much with 16 cams at 1440p.

    • (Score: 2) by JoeMerchant on Saturday December 31 2016, @10:16PM

      by JoeMerchant (3937) on Saturday December 31 2016, @10:16PM (#447957)

      >not so much with 16 cams at 1440p.

      Oh, come on, you can co-locate NUCs, one per 4 cameras, and have them do the transcode for you.

      Yeah, it sucks.

      --
      🌻🌻 [google.com]