Flash Player - HOW OFTEN does it need updating?

[KeyboardDemon]

I too had a warning about flash not being up to date while I was looking for some news clips a few days ago, I ended up closing the window as I didn't trust getting what is described as critical system updates from a web site instead of through my usual Windows Updates, I didn't think it was something that I need worry about but little did I know at the time. I'll check all the PCs at home to ensure that they have the latest versions of flash or maybe even remove flash completely as has been suggested above.

[GuidoLS]

^ what is the alternative for content that requires it then? if iPlayer as Zak says won't work without (haven't used it lately to notice) then are such sites also looking to ditch it?

Honest answer - I don't know. Chrome's sandbox mode was supposed to be the safest thing going with Flash, and even it got bypassed. I think that's why there's been such a large call to finally bring its use to an end. Due to licensing, there's really no alternatives - even the YouTube apps are kind of sketchy, legal wise. My only real use was YouTube and similar, and the occasional Flash games. The games were no loss, and neither are the videos that won't work with HTML5.

[sammyc]

Thanks. As said, with an alternative for Youtube there's so little I ever need it for that in reality, even using with caution as I have been, go or stay I probably wouldn't notice that much; so I guess it can go tbh.

[Rainmaker]

The warnings that Flash was out of date was not malware. Mozilla made changes serverside that warned all users of Firefox that Flash was out of date, and had been disabled. This was despite there being no update available from Adobe, at that time. It was in response to several critical 0day vulnerabilities, resulting in Adobe pushing several updates this week alone. There is no harm in setting Flash to automatically update (if you keep it installed), it won't install any extra crapware but it will keep your system current. That's vital these days, especially running Flash (or Java).

On Linux systems there are non-Adobe versions of Flash available (for example Gnash, Pepperflash). YMMV.

[ARr0w]

Whenever a update of flash player arrives, just update it right away. Only takes 5 minutes. Btw, New HTML 5 is beating up flash player. So, maybe soon, you won't even need it anymore for web browsing

[EndlessWaves]

It's worth pointing out that google chrome (but not chromium et al.) has flash built in so you can keep an install of that around to use any flash-only site such as iPlayer while having flash uninstalled generally.

[GuidoLS]

It's worth pointing out that google chrome (but not chromium et al.) has flash built in so you can keep an install of that around to use any flash-only site such as iPlayer while having flash uninstalled generally.

The last 0day actually beat the built in defenses of Chrome, which may well be the reason that this is all coming to a very rapid head. There's no safe version of Flash, period. When a product has to be patched at least 20 times in an 18 month period just to keep users systems from being exploited, and offering nothing new as far as performance or usability, it's past time for it to go, and we should be looking very hard at anyone that is still making any kind of product that forces us to use Flash.

[EndlessWaves]

The last 0day actually beat the built in defenses of Chrome, which may well be the reason that this is all coming to a very rapid head. There's no safe version of Flash, period.

Sure, but having it contained in a separate browser and only used to visit selected sites seems less risky than having it running in your main browser where any site can activate it.

[Chugz]

Firefox blocked the early versions of Flash didn't it? I think the problem with Flash comes when there is a zero day exploit, and that's definitely one that the bad guys will try to hit all the vulnerable guys with, as much as possible.

[Bluecube]

The problem with Flash is that it's a mess with too many bugs that allow exploits. I've now removed it from all my PCs as there's no need for it.

[Chugz]

The problem with Flash is that it's a mess with too many bugs that allow exploits. I've now removed it from all my PCs as there's no need for it.

HTML5 YouTube is a lot more modern, but it does have its drawbacks such as increased CPU overhead. HTML5 will eventually take over Flash, but not for a long time yet; the same way IPv6 was meant to take over from IPv4.

[Rainmaker]

DRM content (iPlayer, ITV Player et al.) needs to catch up before totally ditching Flash is feasible for me. I'm on Linux with real time backups so it's not as bit a 'risk' for me tbh. Yes the platform is still vulnerable where exploits exist but Linux + AV + real time backups means I'm not that worried. I only enable Flash on a case by case basis (eg iPlayer), and it's disabled in all other instances so again not too big an attack surface.

[andreipoe]

HTML5 YouTube is a lot more modern, but it does have its drawbacks such as increased CPU overhead. HTML5 will eventually take over Flash, but not for a long time yet; the same way IPv6 was meant to take over from IPv4.

On my laptop at least, Flash YouTube seems to use more battery than HTML5. If you watch 1080p60 videos, you will get high CPU usage anyway, especially on mobile devices.

[Zak33]

Speed test doesn't work without it./.. so only 2 of my regular website so far cause me grief without flash

[rapidracer10]

I think theyve ruined it with the fake 60fps, it just doesnt make for very nice viewing as it did before. Stuff like iplayer

[stevie lee]

does Microsoft Edge have it built in like chrome does?

I'm on a 1 week old win 7 clean install, updated via win update. never even went near adobe website. upgraded to win 10 a few days ago.
load up iplayer in edge and it works, r-click on screen and it says 'about Adobe flash 18.00.209'
speedtest.net says the same. its working with flash.


I never installed it, it must be part of edge