Adobe Releases Sandboxed Flash Player For Firefox 104
Trailrunner7 writes "Adobe has released a new version of their Flash player that now gives Firefox users the additional security of a sandbox and also includes a background update mechanism for Mac users. Flash has run in a sandbox on Google Chrome and Internet Explorer for some time already. The big security news in Flash player 11.3 is the addition of the protected mode sandbox for Firefox on Windows. That's a major change for Adobe, which has been adding sandbox to its main product lines for a couple of years now. Adobe Reader X has run in protected mode — which is what Adobe calls its sandbox — since its release, and the company also added a sandbox to Flash on Google Chrome. The sandbox is designed to prevent attackers from using vulnerabilities in Flash to break out of the application and move to other apps or the OS itself."
How about they release a new 64bit version for Lin (Score:5, Interesting)
How about they release a new 64bit version for Linux? The colour in YT videos is totally messed up on my Ubuntu box
Re: (Score:3, Insightful)
adobe hates linux.
Re: (Score:2, Informative)
Re:How about they release a new 64bit version for (Score:5, Informative)
I'm not sure if you recall, but Flash for linux is discontinued unless you're using the bundled Chrome version (http://www.osnews.com/story/25639). In light of that I've given up on the idea of them fixing any major bugs for that platform.
Re: (Score:1)
*Technically* it's discontinued until Firefox and the other browser writers support the Pepper API.
Only Chrome, not even other Pepper implementations (Score:5, Informative)
Re: (Score:3)
One wonders if Adobe will revisit that decision if Mozilla changes their minds. Bet you they would.
Re: (Score:2)
They did release a small build update for v11.2, but that's it. I guess non-Chrome users are screwed like me. :(
Re: (Score:3)
Just use dwhelper [downloadhelper.net] and mplayer.
Flash vector animations and Flash games (Score:2)
Just use dwhelper and mplayer.
There are uses of Flash Player other than to stream video. How well does this combination that you recommend work for Flash vector animations and Flash games?
Re:Flash vector animations and Flash games (Score:4, Interesting)
I recommend their authors port their work to a non-proprietary format, or resign their proprietary crap to the dustbins of history where it belongs.
How to port? (Score:2)
I recommend their authors port their work to a non-proprietary format
I agree with you in principle. However:
I thought since Adobe changed its SWF spec licensing policy years ago as part of the Open Screen Project, SWF was a non-proprietary format. And even if not, what solution do you recommend for an author to convert something like Homestar Runner or Weebl and Bob to a non-proprietary format? And what techniques should I use to convince authors to do so?
Re: (Score:2)
Honestly, I couldn't really give a shit. The authors are the ones who should care about their work disappearing from history. If there's anything actually worthwhile locked up in flash, someone will reverse engineer it and create a flash emulator just like they've done for so many consoles.
Smokescreen (Score:1)
Adobe changed its SWF spec licensing policy years ago as part of the Open Screen Project
If there's anything actually worthwhile locked up in flash, someone will reverse engineer it and create a flash emulator
And the Open Screen Project makes it that much easier to make a Flash Player emulator like Smokescreen, which we discussed two years ago [slashdot.org].
Re: (Score:2)
Re: (Score:1)
Disable hardware acceleration (I had that problem with an Arch Linux box, x86-64, using the nvidia propietary drivers)
Re: (Score:1)
Re: (Score:2)
Re: (Score:1)
Let me guess, anything red is turned into a blue-ish color?
I think a downgrade is in your future
Re: (Score:3)
Load a youtube video, right click, select "Settings", go to the leftmost tab, de-select "Enable Hardware Acceleration". Voila, colours are back to normal.
Re: (Score:2)
They just released an update today. flash-plugin-11.2.202.236-release.x86_64 is available to download from their website.
Re: (Score:3)
Re:I do (Score:2)
who still uses Linux?
I do.
I want a small lightweight laptop, with a full keyboard (dedicated delete / backspace / pg up/ pg dn / home / end / INSert / PrtScreen / etc. keys!). So I have had Thinkpads X... machines for the last 10 years or so. (X31, X200s).
And I also want access to a Real Terminal with a Real Shell. So I install Linux on that Thinkpad, and a couple of WinXP virtual machines for a few special apps that only run on Windows.
Re: (Score:2)
Do not feed the trolls.
Huh (Score:5, Interesting)
Re:Huh (Score:5, Funny)
The captain never leaves a sinking ship!
Unless he's Italian.
Re:Huh (Score:5, Funny)
Vada A Bordo, Cazzo!
Re:Huh (Score:5, Funny)
Dear Adobe,
I really hope you do not give up on Flash. I want Flash to live and I want it to be used everywhere. I love it, I love the idea of it, I love everything about it. I want as little web content to be written in html5 as possible.
I dread the day when I start my web browser and all that colourful flashing cpu hogging vomit that I avoid by NOT having installed flashplugin will have been converted to html5. It'll be like going back to 1996 when web was full of GIFs. Please do NOT do this to me; do not abandon Flash.
Sincerely yours, world's biggest Flash fan
Re: (Score:2)
Excellent News! (Score:2, Funny)
This really solidifies Flash as the web container of choice and knocks HTML 5 for six!
Gotta be a sad day if you're an IOS user.
Re: (Score:3)
Yes, this extra layer of software is sure to make it as responsive as a native video decoder.
Re: (Score:2)
I agree that is a good tradeoff, and I was not commenting on that aspect. I was commenting on Flash being a very heavy chunk of code to load if all you want to do is play videos, and this new layer will only bloat it further.
No Windows Crash then? (Score:2)
Re: (Score:1)
Wow - maybe I am better off with 32-bit Win7? Firefox crashes on me very frequently, probably because Win7 won't let me use swap space to get past the 4GB RAM limit, and FF+Flash is a bit of a memory hog (though not as bad as Chrome.)
And here I'd just been going to rant about "Does this mean Firefox won't crash as often?"!
32-Bit Win7 Swap Space Limits (Score:2)
I'm using 32-bit Win7, not 64-bit. (Ask my work IT department why; it's not my choice.) I've got 4GB of RAM. It won't let me set more than 4GB of swap space, even if I use multiple partitions. It's really annoying.
And as far as the person who asked about Firefox memory goes, I've usually got 50-100 tabs open, with usually about 1GB of Firefox and 1/4-1/3 as much plugin-container, which works just fine 90% of the time, though it occasionally wants to spin disks for a while, or crash.
Re: (Score:1)
I have to ask? How many tabs do you have open? The most I have ever seen a browser use is maybe 2.5 gigs with 30+ tabs.
At 30+ tabs it is unmanageable as you spend more time tab cycling trying to figure out which one is where etc. WHen you start Office you do not open all +100 files at once do you? That would be insane and this is why the browser is going crazy trying to run 100 web applets at the same time in your browser. FF 12 is the lightest browser I have seen so far and I think it is counter intuitive
Re: (Score:3)
30+ tabs is perfectly manageable. 80+ is too if you use tab groups.
You need to consider different use cases. For example, just reading through my RSS feed in the morning, I regularly open 30+ tabs with the stuff I want to read; then, when reading each one, I might open a few more (for example, pages linked from the article).
That said, I use Firefox too on a system with 2GB total and no swap and it runs fine.
Re: (Score:2)
That's a matter of using the right interface -- I use Vimperator [vimperator.org], and (with its keyboardable, search-centric interface) don't have trouble juggling 150+ tabs. The "where" of them -- in terms of ordering the list -- is completely irrelevant; if I want a page about foo, I type bFoo<tab> and get a compact list of which pages regarding Foo I have open, and can select them by typing the number for
Would be nice if it wasn't a memory hog (Score:2)
I upgraded from the old Flash when youtube stopped supporting it, and the new Flash runs very poorly on my 1/2 gigabyte PC. It slowsdown Firefox 10 LTS and makes the non-google Chromium randomly freeze for 1-2 minutes (until a popup asks if I want to kill flash).
Re:Would be nice if it wasn't a memory hog (Score:5, Funny)
My phone has more RAM than that.
I suggest you spend $10 and buy more RAM.
Heck I might even mail you some if you ask nicely.
Re: (Score:1)
I had a similiar conversation with him to upgrade a few months ago. Now is an excellent time to upgrade before Windows 8 is out if you dual boot. XP is on the way out and its easy to migrate with the easy transfer wizard and there is an XP mode if you upgrade to the pro version.
The web is a platform that constantly upgrades just like an OS. No one is feeding the same IE 6 code that used 40 megs of ram when he bought hos computer 10 years ago. JQuery and jit optimization and high rez graphics take hundreds o
Re: (Score:2)
Why would it suck to have an awesome phone?
Re: (Score:3)
>>>My phone has more RAM than that.
Doubtful. It might have more Flash or ROM storage, but not more than 512 MB RAM. For example the iPhone 3 had half of that. Anyway, I thought about adding more RAM to my desktop but I honestly thought it would die 2-3 years ago (and then I'd have wasted money). But it just keeps ticking.
Re: (Score:3)
My Galaxy Nexus has 1GB of RAM. The Galaxy S3 has 2GB of RAM.
It has 32GB of flash. Which is not read only.
http://en.wikipedia.org/wiki/Galaxy_Nexus [wikipedia.org]
Welcome to 2012.
Re: (Score:2)
My HTC Evo 3D has 808mb. For some reason.
Still more than cpu6502 has...
Re: (Score:2)
Where are you getting that number?
http://en.wikipedia.org/wiki/HTC_Evo_3D [wikipedia.org]
1GB in that phone. If you are looking at apps running/cached you are only seeing apps that can be stopped and not the RAM the OS itself is using.
Re: (Score:2)
Re: (Score:2)
That is how all these SOCs work, I do believe.
I bet our friend with the outdated computer does not have another 512MB of ram on his GPU.
Re: (Score:2)
From the root terminal:
$ su
# free -m
total used free shared buffers
mem: 808 784 22 0 34
-/+ buffers: 751 57
Swap: 0 0 0
#
Re: (Score:2)
I have an old laptop like that. Even though it has 256 megabytes stock, it only shows 224 MB under the computer information. The other "missing" RAM is being used for graphics. (Strangely my laptop runs okay like that. Maybe because it's still using the original XP.)
Re: (Score:2)
Re: (Score:1)
Re: (Score:1)
The idea is to replace it before it dies as you may not get all your data and programs transferred. It really is not that much of a hassle and the situation is only going to get worse as more AJAX uses bloated api's and HTML 5 will cache all the hundreds of megs of images and video per tab. Flash at least downloads it and does not keep all of it in ram at once.
Your machine, but I have not touched a system with that much ram in probably 6 or 7 years at least. I service computers for a living too and I at lea
Re: (Score:2)
Re: (Score:3, Informative)
Best sandbox ever ... (Score:5, Interesting)
I've personally found the best way to sandbox Flash is to not install it.
I honestly can't name a single site that I care about that uses it -- possibly because Flash makes me immediately not care about a web site. I know some people really like it, and it does things they really think is cool, but to me it's been something I've avoided for a long time now.
But, who knows, maybe next week I'll discover something I can't live without that uses it.
Re: (Score:1, Insightful)
I honestly can't name a single site that I care about that uses it
YouTube? I know a few people visit that site.
Re:Best sandbox ever ... (Score:4, Informative)
They have an HTML5 version for many things.
Re: (Score:1)
Yes, but when you google an artist or a song (let's say, Bob Welch [youtube.com], who just committed suicide because of failing health), chances are you'll need Flash.
Re: (Score:2)
https://addons.mozilla.org/en-US/firefox/addon/unplug/ [mozilla.org]
Re: (Score:2)
Re: (Score:2, Informative)
YouTube [github.com] can be watched with a Python script.
Re: (Score:3)
But not me ... I usually use a prominent "You need to install Flash" as a cue to hit the back button.
I have no doubt that there are sites that loads of people use that are heavy on Flash. I'm aware of the technology, and I'm not saying that others don't use it or that they shouldn't be allowed to.
I'm saying I, personally, do not install it on any machine I control, and generally think it's a nuisance. If I hit a site which requires Flash, I leave. I've yet to
Re:Best sandbox ever ... (Score:4, Informative)
http://userscripts.org/scripts/show/94609 [userscripts.org]
This forces HTML5 forever, and it seems to work with just about any video.
Greasemonkey required though.
Re: (Score:2)
*Plenty* of videos on YouTube don't work with HTML 5, sadly.
HTML5 for videos with ads? (Score:2)
This forces HTML5 forever, and it seems to work with just about any video.
Does it work even with videos that have advertisements? This includes videos posted by Partners and videos that comment on a particular piece of commercial recorded music.
Death to Flash! (Score:3)
Re: (Score:2)
And if YouTube keeps showing you "Cannot display video", change your user agent string for the iPad one. Works 99% of the time.
Re:Death to Flash! (Score:4, Funny)
And if YouTube keeps showing you "Cannot display video", change your user agent string for the iPad one.
At which point you get "This video cannot be displayed on mobile devices."
Re: (Score:1)
Interacting with content, however, is an entirely different matter. HTML5 is great for structured documents, but it blows chode for interactivity. Yes, I know, it's still possible to do it in HTML5, it is just really really needlessly painful. Seriously, to anyone who has done _real_ flash development (EG. if you are using the Flash IDE then you are just a glorified designer... sorry, it's true), HTML5 is a total joke.
I admit, there are many problems with the "Flash" eco system. But the solution to those p
Re: (Score:2)
If you want whole applications sandboxed, give sandboxie a shot.
Re: (Score:2)
Glad I don't work for Adobe (Score:2, Interesting)
I can only imagine how tough it would be to be a developer on the Flash team. Would you even want that on your resume? I'm not sure I would want to be associated with one of the most hated, least trusted applications out there. I'm guessing that when people find out you work on Flash, you would be constantly forced to defend Adobe and the Flash team or admit that you were part of a huge failure.
Re: (Score:2)
The thing is, now we're back to 1998 with sites being created for specific browsers. That's way more onerous than Flash ever was! It's becoming a moot point though; multimedia and interactive content will be primarily viewed through apps, not the web. HTML5 is sound and fury, signifying nothing.
Photoshop is Adobe's bread and butter; I think they've still got good people working on that team. And they probably have fairly free reign to do blue-sky feature development. They have good people still on Flash als
What about a sandbox for Mac & Linux users? (Score:1)
I still need Flash because one or two sites I visit use it as a major vehicle for content (e.g. Homestuck).
So, where's a nice, safer sandbox for the platforms I use?
flash download page appears to be broken (Score:2)
Re: (Score:2)
Flash does not need sandboxing. (Score:1)
Adobe on the other hand...
Note: not for XP (Score:5, Informative)
From Adobe's news release: [adobe.com]
[Emphasis added]
The restrictions we apply to this sandboxed process come from the Windows OS. Windows Vista and Windows 7 provide the tools necessary to properly sandbox a process. For the Adobe Reader and Acrobat sandbox implementation introduced in 2010, Adobe spent significant engineering effort trying to approximate those same controls on Windows XP. Today, with Windows 8 just around the corner and Windows XP usage rapidly decreasing, it did not make sense for the Flash Player team to make that same engineering investment for Windows XP. Therefore, we've focused on making Protected Mode for Firefox available on Windows Vista and later.
I've been running a sandboxed version for years (Score:2)
It's called FlashBlock.
did not autoupdate (Score:2)
I thought a new feature for 11.2 was autoupdate in the background. Did not work for 11.3.
Great .. if it would work. (Score:2)
It took a while, but I finally located the Sandbox Flash for Firefox and updated my Firefox.
Now I have no flash on Wired, I have no flash on Youtube, I have no flash on my forums.
Thanks a lot, Adobe, you useless shits.
I'm considering a corporate ban on Adobe.. (Score:2)
I just got the latest Flash update, and the process to get to the license was so horrific that I have sent it off to the lawyers to go through it with a fine comb - I really don't trust any organisation that makes it so hard to find the terms you agree to.
When you receive the update and you want to see the license you have to:-
1 - click a link which leads you to an external page. The relevant license is not embedded in the package you download, so there is a risk of disconnect between product and license.
2