Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Adobe Releases Critical Security Update for Flash Player on Mac
- Thread starter MacRumors
- Start date
- Sort by reaction score
That's for the Forum message box, "Upload a File", Flash-based uploader. You can disable it in your preferences -- https://forums.macrumors.com/threads/forum-pages-request-flash-use.2002664/#post-23630506
EDIT : Sorry; I looked more closely at your screenshot. That's from MR' Mac Blog page. Something else is calling for it.
Last edited:
I get it, it all depends on the company. We do not allow you load corporate software on a personal device, so either you would have to VDI in or carry around a corporate laptop that is heavily locked down for security as I mentioned. hopefully you are careful enough that having flash on your personal laptop does not create problems for you down the road.
Yes I know Flash is kind of a security mess, but it's hardly the only one. How often does Apple release security updates for the Mac and iOS? Does that make them "a vector for total system compromise" and something to be avoided at all cost? At least Flash can be and is promptly disabled whenever a vulnerability is discovered and these days it seems to be disabled more often than not. This avoid at all costs to time and convenience argument does sound to me like a religious crusade. The vast majority of computer users aren't going to join it. A cure worse than the disease.
Sadly, some people do. Especially in government and small business where websites are (still) coded to run Flash. Budget constraints restrict the funding needed for an overhaul.
Weird. I said nothing at all about work. I specifically said that I would not trust a bank that requires Flash (for reasons I posted earlier in this thread).
But since you ask. Yes, I would have serious reservations about installing Flash on my personal machine just to access my works benefits site. Maybe I could just use the company provided machine for that activity. In any case I would inform HR of the issue and ask when they plan to remediate it and if they have plans for mobile accessibility.
The way government and many companies move when it comes to things of this nature and the providers they partner with for these kinds of things it might be something that might get "remediated" in the next decade or two...perhaps.
That doesn't change my stance. I still wouldnt install Flash on my personal machine. If Flash is required, they can provide/support a machine with it configured.
HA! I love that. To be fair, though, that's one of many reasons I ditched Hulu.
If you only use Flash on the Mac Mini for a small number of reputable websites, you could just install something like Click2Flash and only click to enable Flash for the few elements needed. The security issues with Flash are generally only related to malicious Flash code on websites (since Flash ads have had instances of being distributing malware, even if you only go to reputable sites, ads using Flash served via ad networks could still make you vulnerable, thus restricting Flash to only the elements on a website that you need it for via Click2Flash).
However, being concerned about Flash vulnerabilities but not about vulnerabilities in Snow Leopard is, how do I put it, odd.
[doublepost=1476310863][/doublepost]
It does disable it. However, if you click on a UI element in a webpage that needs Flash, Safari will ask you whether to enable it just for this website. At least that is roughly what is happening, I might be getting the details wrong in that it enables it only for the UI element and not the whole website.
[doublepost=1476311040][/doublepost]
But does it use Flash if you have Flash installed and enabled?
[doublepost=1476311195][/doublepost]
Pesky details. Life appears to be so much simpler if you ignore the details.
Ha ha, no; it was an example/cautionary tale of ongoing contradiction of workplace HIPAA policy "enforcement" vs. the accepted IT security standards in "safeguarding" patient/client privacy. There's a lot of catching up to do, but IDK the progress. This is why it's like Flash: http://blog.securitymetrics.com/2015/04/pci-3-1-ssl-and-tls.html http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdfSo don't donate blood?
[doublepost=1476312067][/doublepost]
Yep. it's 2016. No financial or healthcare institution should be allowed to operate a website that uses Flash or anything less than TLS 1.2 and 256 bit PFS. For instance, this forum is not encrypted:
Last edited:
I unfortunately still need it for Crunchyroll (literally the only site I use regularly that still only has a Flash player). So for now, I can't escape it.
Some sites still do yeah I know how stupid are those site when easily can move to HTML5 when will Adobe officially go away.
Yes, the Facebook app, not the desktop site. But actually, Facebook just recently changed their site so it doesn't use Flash. My information was slightly outdated.
[doublepost=1476332065][/doublepost]
So you never watch news online? Ok then. Lots of people do, so everyone here should stop saying that nobody needs Flash. I hate Flash too, but if I want to watch something on BBC's website like millions of other regular people, I need it.
Last edited:
You keep bringing up reality, so the ball is in your court. Name a single bank that requires flash. It is no longer 2006.
Clearly people already brought up some real world examples in the thread. Questioning the validity of what might apply to what some people use doesn't change reality and only makes it all come off as petty.
Some examples from the thread:
Many websites still need it for video. CBS, HBO, Hulu, etc.
Believe me, I've tried to delete it. It always comes back
I know, puzzled the bejeezus out of me too. Still.. there it is. :shrug: