If one good thing has come out of the recent Hacking Team hack (apart from a fairly scummy company getting their come-uppance and failing to initiate their own internal kill processes), it’s a salutary warning on the issues with mobile code. In particular, the issues with our old friend, Adobe Flash.<\/p>\n
3 o-day vulnerabilities in Flash have been released in 2 weeks, and the frequent upgrade cycle can’t be helping with not introducing other issues. Yet we still see a huge number of sites (and even better, security tools) using it. Among the best was the US Senate debate on cybersecurity requiring you to load flash to watch it — while there were 0-day flash vulnerabilities in the wild).<\/p>\n
Cisco, for all that I’ve spent a lot of time working with and promoting their products, requires flash for functions in the console of ISE. It’s time for this to stop; HTML5 is available, and we can use more secure (in fact, I’m not sure we can use less secure unless it’s Java) methods to present data. Flash WWW sites have been irritating for years — now they’re irritating and dangerous. Yet if industry leaders and vendors continue to REQUIRE Flash to effectively use their products, how fast can we actually get rid of it?<\/p>\n
On a more personal note, I’ve been endorsing running a flash-blocker, click-to-flash, or some sort of browser plug-in for years. \u00a0It’s even more pressing these days — just do it. Once you’ve done it, think before you click on that flash video elf-bowling game!<\/p>\n","protected":false},"excerpt":{"rendered":"
If one good thing has come out of the recent Hacking Team hack (apart from a fairly scummy company getting their come-uppance and failing to initiate their own internal kill processes), it’s a salutary warning on the issues with mobile code. In particular, the issues with our old friend, Adobe Flash. 3 o-day vulnerabilities in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[3],"_links":{"self":[{"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=\/wp\/v2\/posts\/14"}],"collection":[{"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14"}],"version-history":[{"count":1,"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=\/wp\/v2\/posts\/14\/revisions"}],"predecessor-version":[{"id":15,"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=\/wp\/v2\/posts\/14\/revisions\/15"}],"wp:attachment":[{"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.paidparanoid.net\/site\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}