You are here

A Call for Flash Updates

13 posts / 0 new
Last post
Devo
Offline
Last seen: 6 months 2 days ago
Joined: 2007-09-04 14:55
A Call for Flash Updates

PortableApps provide a great service for those who use computers that are locked down so that preferential software cannot be installed. Often times the reason for this is that the owners of the computers do not want inexperienced users (or even sometimes, experienced users) to install questionable software that may contain a virus. This is a security measure. PortableApps provides a work around to this, as it allows other, sometimes better software to be used.

To address the security issues, PortableApps generally gets browser updates out within a day or two, and sometimes within hours. This is a great service and plays an important role in keeping browsers and in turn computers secure. However, there is one glaring security hole. Adobe Flash. Flash is probably one of the most widely used plugins for the internet and is used on countless websites. When security holes are found in flash, Adobe is pretty good about getting an update out to close the hole within a few days, just like Mozilla does with Firefox.

Unfortunately, PortableApps does not offer a way to update flash. There is a Flash Plugin Installer that John provided, but it unfortunately installs an outdated version of flash. I understand that Adobe has changed their installer so that it can't be disassembled, so users are stuck with an outdated version of flash.

What good is using an updated version of Firefox, if you're stuck with an outdated version of flash with several security holes? I know there are ways to manually update flash, as I have done myself, but this is unacceptable. One of the goals of PortableApps.com is to allow for non technical users to easily use portable programs. John has opted to forgo advanced features in the platform and launchers to make it easier for novice users. Shouldn't novice users be afforded the same updates and security that advanced users use? I think it is important to find a way to update flash with the current installer or similar option. Novice users should not have to follow a multi-step process to update flash, they should be able to install the update just like they do with any other portable software update.

I know this is long winded, and I don't mean to sound negative, but I think security as well as ease of use should be paramount goals of PortableApps. It seems as if an exploit is found and closed in flash nearly every other week. So I ask again, what is the point of using a secure browser if one of the most used plugins is dangerously out of date? Hopefully a solution can be found that will allow for flash updates to be installed and ideally updates could be installed from the updater.

John T. Haller
John T. Haller's picture
Online
Last seen: 23 min 52 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Illegal

We can't distribute our own version because it is illegal. Anyone distributing a portable Firefox with flash bundled is doing so illegally. Anyone distributing flash outside of Adobe's installer is doing so illegally.

So, regardless of what we should be able to do, we can't. Period. Anyone currently doing it is doing so illegally. We don't do illegal stuff here.

Basically, you are reliant on the flash installed on the local PC and hoping it is up to date. Or using the flashblock extension in the browser.

Sometimes, the impossible can become possible, if you're awesome!

Devo
Offline
Last seen: 6 months 2 days ago
Joined: 2007-09-04 14:55
Can't the installer download

Can't the installer download it and extract it on users' computers like it is done with some freeware programs?

John T. Haller
John T. Haller's picture
Online
Last seen: 23 min 52 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Nope

I had one in internal beta that did this with Adobe's old installer, but their new installer doesn't work with it. The necessary files in the installer cannot be pulled out by 7-zip or anything else I am aware of (even universal extractor can't do squat with it).

Sometimes, the impossible can become possible, if you're awesome!

Devo
Offline
Last seen: 6 months 2 days ago
Joined: 2007-09-04 14:55
So the only option, if users

So the only option, if users are not savy enough to do it themselves, is to not use flash?

ottosykora
Offline
Last seen: 15 hours 1 min ago
Joined: 2007-10-11 17:48
DEvo

the best would be to address your disappointment to adobe, since they are the authors of the flash, they have the rights to with what ever they think is right, and they blocked the installer in a way so nobody except there own 'downloader' can unpack it.
So yes , you are right, if someone does not manage to copy/paste one file from the PC to usb stick, yes he can not use the flash portably.
I am not keen on all 'new' things and latest versions and latest hype of anything, but when adobe continues this policy, the new versions of html which have methods of displaying videos and moving picts included, will finally take over the 'market'.

And BTW, are you sure that the current version of flash was published just because of some security problems or just because adobe wanted produce some version which is not so easy to be unpacked and need to be installed only from their website with some strange 'downloader' software?
I mean it is so easy to explain all fancy things like 'genuine ...' with all sorts of security stories.

Otto Sykora
Basel, Switzerland

Tim Clark
Tim Clark's picture
Offline
Last seen: 13 years 3 weeks ago
Joined: 2006-06-18 13:55
It is a Security update

BTW, are you sure that the current version of flash was published just because of some security problems

http://www.adobe.com/support/security/bulletins/apsb10-16.html

Also, expect another one soon:
http://isc.sans.edu/diary.html?storyid=9544

Also, I believe this is the third update since they changed their install format.

Things have got to get better, they can't get worse, or can they?

ottosykora
Offline
Last seen: 15 hours 1 min ago
Joined: 2007-10-11 17:48
yes sure,

somehow one has to justify why to place also other files next to it which do call home twice day and report some greetings from me to the CEO of adobe.

Otto Sykora
Basel, Switzerland

rangaroo
Offline
Last seen: 13 years 2 months ago
Joined: 2008-11-14 22:38
Flash distribution license

http://www.adobe.com/products/players/fpsh_distribution1.html

It is possible to be licensed by Adobe for Flash distribution, but
the terms of the license are restictive. Basically only on physical
devices within a closed intranet environment.
Adobe might have a way to do this for PortableApps; there is a license
application link at the above URL.
I tried this once, Adobe was quite clear that they have no interest unless
your organization is large enough to attract their volume licensing agents.

IMHO, web sites that require Flash are often not worth the viewing.

HTML5 is far better.

I stopped installing Flash over a year ago on all our equipment.

OliverK
OliverK's picture
Offline
Last seen: 2 years 10 months ago
Developer
Joined: 2007-03-27 15:21
I do not have flash

I do not have flash installed, and I don't miss it. For users that find themselves needing flash, Google Chrome which ships with flash installed and functional by default is the way to go.

However, you can even ditch flash and still use youtube by signing up for the html5 demo at youtube.com/html5 Then you can watch youtube, even in high def with no extra plugins.

The progress present in html5 is incredible and in my opinion replaces the need for flash. Google's Pacman game was written in HTML5 and little bit of java. Not flash.

As far as adobe patching security holes, updates are quarterly. Rarely do they issue an emergency update. I refuse to use flash because of of its security vulnerabilities. Its time to tell websites, I don't miss flash and I won't miss you if you keep using flash. Until adobe cleans up its act on flash and pdf files, I won't be supporting them or their products.

Too many lonely hearts in the real world
Too many bridges you can burn
Too many tables you can't turn
Don't wanna live my life in the real world

8ball
Offline
Last seen: 10 years 4 months ago
Joined: 2010-02-01 21:08
Use Chrome

and never worry about Flash.

Sometimes making love is just not enough, you have to step it up!

Darkbee
Darkbee's picture
Offline
Last seen: 3 years 12 months ago
Joined: 2008-04-14 09:41
Don't Use Flash?

If only it were that simple. It sort of reminds of the days gone by when people would say: "Don't use Internet Explorer". Again, if only it were that simple. Once upon a time there were websites that would only work in Internet Explorer (My bank used to be one of them believe it or not!). Flash is an unfortunate fact of life at the moment, but hopefully these fat-cat greedy corporate evil-doers will realize their ways will not serve them well when people start to adopt more open standards en-masse and avoid Flash like the Plague.

In the mean time we're sort of caught in Limbo unless we want to cling to Google as a savior.

OliverK
OliverK's picture
Offline
Last seen: 2 years 10 months ago
Developer
Joined: 2007-03-27 15:21
In the mean time we're sort

In the mean time we're sort of caught in Limbo unless we want to cling to Google as a savior.

Don't we already do that? </sarcasm>

Too many lonely hearts in the real world
Too many bridges you can burn
Too many tables you can't turn
Don't wanna live my life in the real world

Log in or register to post comments