Slashdot Mirror
Domain: adobe.com
Stories and comments across the archive that link to adobe.com.
Stories · 174
-
Adobe To Donate Flex SDK To Open Source Community
New submitter ProbablyJoe writes "InfoQ reports that Adobe is to donate its web application SDK, Flex, to an 'an established open source foundation' — suspected to either be the Open Spoon Foundation (who have been working on an open source fork of Flex), or the more established Apache Foundation. Adobe has stated on its blog that they consider HTML5 to be a better technology for the future than its own Flex platform, causing frustration among developers who have used the platform for enterprise applications. Is this a generous contribution to the open source community, or just Adobe offloading another failing technology?" -
Will Adobe's HTML5 Strategy Help Developers?
snydeq writes "Fatal Exception's Neil McAllister sees Adobe's shift toward HTML5 as a boon for developers only if the company secures its place in the Web developer tools market — but initial signs suggest that this won't be the case. 'The opportunity for Adobe now lies in filling the gaps in today's IDEs, code editors, and graphics software with new tools that can help designers and developers more easily take advantage of the multimedia capabilities of HTML5,' McAllister writes. 'Unfortunately, however, it sounds like Adobe is going to drop the ball. In this week's meeting with financial analysts, the company said its emphasis is not on building great tools but on subscription pricing, Web-based content creation software, and — most important of all — growing its digital marketing, advertising, and analytics businesses. That's right: Adobe wants to be Google. It's too bad because Web developers could really use an Adobe right now.'" -
Adobe Ends Development of Flash On Mobile Browsers
larry bagina writes "Jason Perlow of ZDNet is reporting that Adobe will stop developing Flash for mobile browsers and focus on AIR and HTML5 tools. I felt a great disturbance in the Force, as if 750 voices screamed out in terror and were laid off. But that noise was overshadowed by everybody else celebrating." -
Unreal Engine 3 Running In Flash
Eraesr writes with news that Epic Games has added Unreal Engine 3 support for Adobe Flash Player. This comes alongside news that Flash Player 11 has been released, an update that added Stage3D, "a set of low-level GPU-accelerated APIs enabling advanced 2D and 3D capabilities across multiple screens and devices." "With its new hardware-accelerated Stage 3D APIs, Flash Player 11 allows 1,000 times faster 2D and 3D graphics rendering performance over Flash Player 10. Developers can now animate millions of objects with smooth 60 frames per second rendering and deliver console-quality games on Mac OS, Windows and connected televisions. 'With UE3 and Flash, games built for high-end consoles can now run on the Web or as Facebook apps, reaching an enormous user base,' said Sweeney. 'This totally changes the playing field for game developers who want to widely deploy and monetize their games.'" -
Unreal Engine 3 Running In Flash
Eraesr writes with news that Epic Games has added Unreal Engine 3 support for Adobe Flash Player. This comes alongside news that Flash Player 11 has been released, an update that added Stage3D, "a set of low-level GPU-accelerated APIs enabling advanced 2D and 3D capabilities across multiple screens and devices." "With its new hardware-accelerated Stage 3D APIs, Flash Player 11 allows 1,000 times faster 2D and 3D graphics rendering performance over Flash Player 10. Developers can now animate millions of objects with smooth 60 frames per second rendering and deliver console-quality games on Mac OS, Windows and connected televisions. 'With UE3 and Flash, games built for high-end consoles can now run on the Web or as Facebook apps, reaching an enormous user base,' said Sweeney. 'This totally changes the playing field for game developers who want to widely deploy and monetize their games.'" -
Adobe Pushes Emergency Flash Player Security Fix
wiredmikey writes "As expected, Adobe today released a security update for its Flash Player. The out of cycle update addresses critical security issues in flash player as well as an important universal cross-site scripting issue. Adobe reported that one of the vulnerabilities (CVE-2011-2444) is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message. To illustrate the importance of keeping systems up to date, including Adobe Flash products, the fact that the RSA cyber attack was executed using a spear phishing attack with an embedded flash file should serve as a friendly reminder. RSA was breached after an employee opened a spreadsheet that contained a zero-day exploit that installed a backdoor through an Adobe Flash vulnerability." -
Adobe's New HTML5 Design Tool No Threat To Flash
pbahra writes "It is a reflection of the huge interest in HTML5 as a possible alternative to Flash that Adobe's launch of a very early preview of a toolkit for professional web developers immediately became a trending topic on Twitter. What has excited people is Adobe's statement that Edge will, 'bring animation, similar to that created in Flash Professional, to websites using standards likes HTML, JavaScript and CSS.' Across the web some headline writers been almost apocalyptic. Beta News, for instance, talks of The Final Days of Flash while SlashGear says, 'Adobe Edge HTML5 app could eat Flash from the inside.' Many analysts, however, are more sanguine. 'People have shown that you can do animation with HTML5, but it's not nearly as well realized as with Flash,' said James Governor, an industry analyst at RedMonk." -
Adobe Patches Second Flash Zero-Day In 9 Days
CWmike writes "For the second time in nine days, Adobe has patched a critical vulnerability in Flash Player that hackers were already exploiting, Computerworld's Gregg Keizer reports. Adobe also updated Reader to quash 13 new bugs and several older ones the company had not gotten around to fixing. The memory corruption vulnerability in Flash Player could 'potentially allow an attacker to take control of the affected system,' Adobe said in an accompanying advisory. 'There are reports that this vulnerability is being exploited in the wild in targeted attacks via malicious Web pages.' Adobe last issued an 'out-of-band' emergency update on June 5, when it fixed a critical flaw that attackers were exploiting to steal Gmail login credentials. Those attacks were different from the ones Google disclosed the week before, when it accused Chinese hackers of targeting specific individuals, including senior U.S. and South Korean government officials, anti-Chinese government activists and journalists. Google, which bundles Flash Player with Chrome, also updated its browser Tuesday to include the just-patched version of Flash." -
Adobe Rolls Out Privacy Controls In Flash Player 10.3
adeelarshad82 writes "Adobe has released Flash Player 10.3, which includes enhanced privacy controls for how your activity is tracked online. Users can now clear local storage — sometimes known as 'Flash cookies' — on versions of Chrome, Internet Explorer, and Firefox. Flash cookies, or local shared objects, made headlines last year when the Federal Trade Commission released a report that called on browser makers to include a 'do not track' option in their products. The FTC also mentioned Adobe because it said the cookies gathered by Flash are collected regardless of the browser's settings." -
Adobe Adopts HTTP Live Streaming For iOS
unassimilatible writes "Ars Technica reports that Adobe has capitulated in the iOS-Flash war, and has adopted HTTP live streaming for iOS. HTTP Live Streaming is a protocol that Apple developed to stream live and recorded video using standard HTTP connections instead of the more difficult to optimize RTSP. It uses H.264-encoded video and AAC or MP3 audio packaged into discrete chunks of an MPEG-2 transport stream, along with a .m3u playlist to catalog the files that make up the individual chunks of the stream. QuickTime on both Mac OS X and iOS can play back this format, and it is the only streaming format compatible with the iPhone, iPad, and iPod touch." -
Flash-to-HTML5 Translator: Smart But Not Pretty
snydeq writes "Fatal Exception's Neil McAllister takes a first look at Wallaby, Adobe's experimental tool for transforming Flash content into HTML5, and finds the tool an interesting idea with little yet to offer. 'Wallaby engineers have made sound decisions in designing the tool, but what you actually get when you convert a Flash project to HTML5 is extremely limited,' McAllister writes, in large part because many Flash features are not supported, leaving developers to add their own interactivity with jQuery." -
Adobe's Reader X Spoils New PDF Attack
CWmike writes "Gregg Keizer reports that Adobe's Reader X stymied a recent attack campaign, researchers said Thursday. But they're not sure why. 'I don't want to take anything away from Adobe — after all, a win is a win — but this particular exploit appears to be designed with previous versions of Reader in mind,' said Chris Greamo, who heads the security research lab at Invincea. 'What appears to have happened is that the exploit breaks, but we don't have a good sense if the sandbox was able to contain it.' Reader X, an upgrade issued last year, features a 'sandbox' designed to protect users from PDF exploits. Adobe claimed that a recently-addressed bug in Chrome that lets attackers escape the browser's sandbox was not present in Reader X's sandbox code. Google patched that bug, the first to earn the company's top bug bounty of $3,133, three weeks ago. Adobe said Thursday it will would ship its next regular update for Reader on Tuesday, Feb. 8." -
VP8 Decoder Implemented In Flash Using Alchemy
An anonymous reader writes "Mozilla's Chris Double has an interesting post on his blog about a port of the VP8 decoder to Flash. He writes, 'Ralph Hauwert has been posting on twitter about work he's done on getting WebM decoding to work by compiling the libvpx source code using Adobe's Alchemy technology. Alchemy is a research project that allows compilation of C and C++ libraries into code that runs on the ActionScript virtual machine used by Flash.' Of course, it's very slow and Adobe says that they'll bring native VP8 support to Flash in due course, but implementing a VP8 decoder in ActionScript is an interesting project nonetheless." -
VP8 Decoder Implemented In Flash Using Alchemy
An anonymous reader writes "Mozilla's Chris Double has an interesting post on his blog about a port of the VP8 decoder to Flash. He writes, 'Ralph Hauwert has been posting on twitter about work he's done on getting WebM decoding to work by compiling the libvpx source code using Adobe's Alchemy technology. Alchemy is a research project that allows compilation of C and C++ libraries into code that runs on the ActionScript virtual machine used by Flash.' Of course, it's very slow and Adobe says that they'll bring native VP8 support to Flash in due course, but implementing a VP8 decoder in ActionScript is an interesting project nonetheless." -
Adobe Launches Sandboxed Reader X
CWmike writes "Adobe on Wednesday released Reader X, the next version of its popular software that includes a 'sandbox' designed to protect users from PDF attacks. Protected Mode is Adobe's response to experts' demands that the company beef up the security of Reader, which is aggressively targeted by attackers. Calling the sandbox a 'new advancement' in protective measures, Brad Arkin, Adobe's director of security and privacy, admitted it will not stymie every attack. But he argued it will help. 'Even if exploitable security vulnerabilities are found by an attacker, Adobe Reader Protected Mode will help prevent the attacker from writing files or installing malware on potential victims' computers,' Arkin said in a post to a company blog late on Thursday." -
Adobe Launches Sandboxed Reader X
CWmike writes "Adobe on Wednesday released Reader X, the next version of its popular software that includes a 'sandbox' designed to protect users from PDF attacks. Protected Mode is Adobe's response to experts' demands that the company beef up the security of Reader, which is aggressively targeted by attackers. Calling the sandbox a 'new advancement' in protective measures, Brad Arkin, Adobe's director of security and privacy, admitted it will not stymie every attack. But he argued it will help. 'Even if exploitable security vulnerabilities are found by an attacker, Adobe Reader Protected Mode will help prevent the attacker from writing files or installing malware on potential victims' computers,' Arkin said in a post to a company blog late on Thursday." -
Adobe Releases Its Own HTML5 Video Player
An anonymous reader writes "Webmonkey has an interesting tidbit about Adobe's release of its own HTML5 video player: 'Adobe has released an embeddable video player that plays HTML5 native video in browsers that support it, and falls back to Flash in browsers that don't. It's cross-browser and cross-platform, so it works on iPhones, iPads and other devices that don't support Flash. Using Adobe's new player, these devices can show videos in web pages without the Flash plug-in.'" -
Adobe Releases New 64-Bit Flash Plugin For Linux
TheDarkener writes "Adobe seems to have made an about face regarding their support for native 64-bit Linux support for Flash today, and released a new preview Flash plugin named 'Square.' This includes a native 64-bit version for Linux, which I have verified works on my Debian Lenny LTSP server by simply copying libflashplayer.so to /usr/lib/iceweasel/plugins — with sound (which I was never able to figure out with running the 32-bit version with nspluginwrapper and pulseaudio)." -
Microsoft Helps Adobe Block PDF Zero-Day Exploit
CWmike writes "Microsoft has urged Windows users to block ongoing attacks against Adobe's popular PDF viewer by deploying one of Microsoft's enterprise tools. Adobe echoed Microsoft's advice, saying the Enhanced Migration Experience Toolkit (EMET) would stymie attacks targeting Reader and Acrobat. Called 'scary' and 'clever,' the in-the-wild exploit went public last week when security researcher Mila Parkour reported it to Adobe after analyzing a rogue PDF document attached to spam. Adobe first warned users Wednesday of the threat, but at the time gave users no advice on how to protect themselves until a patch was ready. Microsoft stepped in on Friday. 'The good news is that if you have EMET enabled ... it blocks this exploit,' said Fermin Serna and Andrew Roths, two engineers with the Microsoft Security Response Center in an entry on the group's blog." A Symantec blog post suggests the people exploiting this vulnerability may be the 'Aurora' group responsible for the attacks on Google late last year. -
Apple's Developer Tools Turnaround 'Great News' For Adobe
cgriffin21 writes "Apple is being praised for loosening of some of the restrictions in its Application Developer Program license agreement that open the door for app developers to work in Flash for the Apple iPhone, iPad and other devices. And no one is happier about the change than Flash-maker Adobe itself. They wrote, 'This is great news for developers and we're hearing from our developer community that Packager apps are already being approved for the App Store. We do want to point out that Apple's restriction on Flash content running in the browser on iOS devices remains in place.'" Apple also received praise from Google over their reversal, which may have been prompted by an FTC probe. Reader Stoubalou adds that Apple shed more light on the app review process by publishing a list of guidelines (PDF) the violation of which may get an app rejected from the App Store. -
Adobe Finally Fixes Remote Launch 0-Day
Trailrunner7 sends in this excerpt from Threatpost (Adobe announcement here): "Adobe today shipped a critical Reader/Acrobat patch to cover a total of 17 documented vulnerabilities that expose Windows, Mac, and Unix users to malicious hacker attacks. The update, which affects Adobe Reader/Acrobat 9.3.2 and earlier versions, includes a fix for the outstanding PDF '/Launch' functionality social engineering attack vector that was disclosed by researcher Didier Stevens. As previously reported, Didier created a proof-of-concept PDF file that executes an embedded executable without exploiting any security vulnerabilities. The PDF hack, when combined with clever social engineering techniques, could potentially allow code execution attacks if a user simply opens a rigged PDF file." Relatedly, Brian Krebs blogs about the downsides of Adobe's increasingly Byzantine update process. -
Adobe (Temporarily?) Kills 64-Bit Flash For Linux
An anonymous reader writes "It seems that with the release of the 10.1 security patches, Adobe has, at least temporarily, killed 64-bit Flash for Linux. The statement says: 'The Flash Player 10.1 64-bit Linux beta is closed. We remain committed to delivering 64-bit support in a future release of Flash Player. No further information is available at this time. Please feel free to continue your discussions on the Flash Player 10.1 desktop forums.' The 64-bit forum has been set to read-only." -
Adobe (Temporarily?) Kills 64-Bit Flash For Linux
An anonymous reader writes "It seems that with the release of the 10.1 security patches, Adobe has, at least temporarily, killed 64-bit Flash for Linux. The statement says: 'The Flash Player 10.1 64-bit Linux beta is closed. We remain committed to delivering 64-bit support in a future release of Flash Player. No further information is available at this time. Please feel free to continue your discussions on the Flash Player 10.1 desktop forums.' The 64-bit forum has been set to read-only." -
Adobe (Temporarily?) Kills 64-Bit Flash For Linux
An anonymous reader writes "It seems that with the release of the 10.1 security patches, Adobe has, at least temporarily, killed 64-bit Flash for Linux. The statement says: 'The Flash Player 10.1 64-bit Linux beta is closed. We remain committed to delivering 64-bit support in a future release of Flash Player. No further information is available at this time. Please feel free to continue your discussions on the Flash Player 10.1 desktop forums.' The 64-bit forum has been set to read-only." -
Adobe Goes To Flash 10.1, Forgoes Security Fix For 10
An anonymous reader writes "The recent critical zero-day security flaw in Flash 10 may have fast-tracked the release of Flash 10.1 today. Adobe 10.1 boasts the much anticipated H.264 hardware acceleration. Except for Linux and Mac OS (PDF): 'Flash Player 10.1, H.264 hardware acceleration is not supported under Linux and Mac OS. Linux currently lacks a developed standard API that supports H.264 hardware video decoding, and Mac OS X does not expose access to the required APIs.' Your humble anonymous reporter, who is using Fedora Linux with a ATI IGP 340M, is very pleased that the developers of the OSS drivers have provided hardware acceleration for my GPU ('glxinfo : direct rendering: Yes,' 'OpenGL renderer string: Mesa DRI R100 (RS200 4337) 20090101 NO-TCL DRI2'), but even if Adobe did provide hardware acceleration for H.264 on Linux, they wouldn't provide it for me because they disable it for GPUs with SGI in the Client vendor string. Adobe 10.1, with all its goodness, now gives me around 95% CPU usage as opposed to about 75% with the previous release. Good times. I anticipate my Windows friends will have a much better experience." -
Adobe Goes To Flash 10.1, Forgoes Security Fix For 10
An anonymous reader writes "The recent critical zero-day security flaw in Flash 10 may have fast-tracked the release of Flash 10.1 today. Adobe 10.1 boasts the much anticipated H.264 hardware acceleration. Except for Linux and Mac OS (PDF): 'Flash Player 10.1, H.264 hardware acceleration is not supported under Linux and Mac OS. Linux currently lacks a developed standard API that supports H.264 hardware video decoding, and Mac OS X does not expose access to the required APIs.' Your humble anonymous reporter, who is using Fedora Linux with a ATI IGP 340M, is very pleased that the developers of the OSS drivers have provided hardware acceleration for my GPU ('glxinfo : direct rendering: Yes,' 'OpenGL renderer string: Mesa DRI R100 (RS200 4337) 20090101 NO-TCL DRI2'), but even if Adobe did provide hardware acceleration for H.264 on Linux, they wouldn't provide it for me because they disable it for GPUs with SGI in the Client vendor string. Adobe 10.1, with all its goodness, now gives me around 95% CPU usage as opposed to about 75% with the previous release. Good times. I anticipate my Windows friends will have a much better experience." -
Adobe Goes To Flash 10.1, Forgoes Security Fix For 10
An anonymous reader writes "The recent critical zero-day security flaw in Flash 10 may have fast-tracked the release of Flash 10.1 today. Adobe 10.1 boasts the much anticipated H.264 hardware acceleration. Except for Linux and Mac OS (PDF): 'Flash Player 10.1, H.264 hardware acceleration is not supported under Linux and Mac OS. Linux currently lacks a developed standard API that supports H.264 hardware video decoding, and Mac OS X does not expose access to the required APIs.' Your humble anonymous reporter, who is using Fedora Linux with a ATI IGP 340M, is very pleased that the developers of the OSS drivers have provided hardware acceleration for my GPU ('glxinfo : direct rendering: Yes,' 'OpenGL renderer string: Mesa DRI R100 (RS200 4337) 20090101 NO-TCL DRI2'), but even if Adobe did provide hardware acceleration for H.264 on Linux, they wouldn't provide it for me because they disable it for GPUs with SGI in the Client vendor string. Adobe 10.1, with all its goodness, now gives me around 95% CPU usage as opposed to about 75% with the previous release. Good times. I anticipate my Windows friends will have a much better experience." -
Adobe Goes To Flash 10.1, Forgoes Security Fix For 10
An anonymous reader writes "The recent critical zero-day security flaw in Flash 10 may have fast-tracked the release of Flash 10.1 today. Adobe 10.1 boasts the much anticipated H.264 hardware acceleration. Except for Linux and Mac OS (PDF): 'Flash Player 10.1, H.264 hardware acceleration is not supported under Linux and Mac OS. Linux currently lacks a developed standard API that supports H.264 hardware video decoding, and Mac OS X does not expose access to the required APIs.' Your humble anonymous reporter, who is using Fedora Linux with a ATI IGP 340M, is very pleased that the developers of the OSS drivers have provided hardware acceleration for my GPU ('glxinfo : direct rendering: Yes,' 'OpenGL renderer string: Mesa DRI R100 (RS200 4337) 20090101 NO-TCL DRI2'), but even if Adobe did provide hardware acceleration for H.264 on Linux, they wouldn't provide it for me because they disable it for GPUs with SGI in the Client vendor string. Adobe 10.1, with all its goodness, now gives me around 95% CPU usage as opposed to about 75% with the previous release. Good times. I anticipate my Windows friends will have a much better experience." -
Adobe Warns of Flash, PDF Zero-Day Attacks
InfosecWarrior writes "Adobe issued an alert late Friday night to warn about zero-day attacks against an unpatched vulnerability in its Reader and Flash Player software products. The vulnerability, described as critical, affects Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux, and Solaris operating systems. It also affects the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh, and Unix operating systems." -
Adobe Calls Out Apple With Ads In NY Times, WSJ
Hugh Pickens writes "Businessweek reports that Adobe has taken out newspaper advertisements in the Wall Street Journal and the New York Times today and posted an open letter to call out the tablet-computer maker for stifling competition. 'We believe that consumers should be able to freely access their favorite content and applications, regardless of what computer they have, what browser they like, or what device suits their needs,' the letter states. 'No company — no matter how big or how creative — should dictate what you can create, how you create it, or what you can experience on the web.' The letter is part of a widening rift between Apple and Adobe. Two weeks ago, Apple Chief Executive Officer Steve Jobs wrote a 29-paragraph public missive panning Adobe's Flash as having 'major technical drawbacks.' US antitrust enforcers also may investigate Apple following a complaint from Adobe, people familiar with the matter said this month. Adobe has also launched a banner ad campaign to let you know that they love Apple. The two-piece banner ads are composed of a 720x90-pixel 'We [heart] Apple' design, followed by a 300x250-pixel medium rectangle that reads: 'What we don't love is anybody taking away your freedom to choose what you create, how you create it, and what you experience on the web.'" -
Multi-Platform App Created Using Single Code Base
andylim writes in with news of a reasonably impressive demonstration of the multi-platform capabilities of Adobe AIR. "Christian Cantrell, a technical product manager at Adobe, has created an app for multiple platforms including OS X, Windows 7, Ubuntu, Android, iPhone OS, and iPad OS. What's amazing is that all the platforms use the same code base. 'The application is called iReverse, and it's a fully functional Reversi game (complete with a pretty decent AI). Although iReverse is fun to play, the most amazing thing about the project is the fact that it runs in all these different environments completely unchanged. In other words, the exact same code base is used to build versions for five different environments. There's no other platform in the world that can boast this level of flexibility — not even close.'" Cantrell says he will open-source the code for iReverse and document how he pulled this off. -
Adobe Not Worried About the Future of Flash
An anonymous reader writes "Adobe company man John Dowdell isn't worried about the future of Flash. He writes in his company blog, 'There's really no "HTML vs Flash" war. There are sure people inciting to create such a war, and individual developers may have strong practical reasons to choose one technology over another, but at corporate levels that drive strategy, all delivery channels are important Adobe territory, whether SWF or HTML or video or documents or paper or ebook or e-mag or film or packaging or whatever. Adobe profits by making it easier for creatives to reach their audiences. We're on the verge of a disruptive change that, I think, will dwarf that of the World Wide Web fifteen years ago. It was great back then when any wealthy person with a workstation in a wired environment could easily reach any creative's webpage. With these cheaper devices we'll be reaching far more people, and with pocket devices we'll be reaching them throughout the day instead of just when "logged-on." The WWW was merely a pale precursor of the excitement we're going to see, I think.' It's interesting to note that he talks about the World Wide Web in the past tense. I find it instructive as to Adobe's perspective. Personally, I'm not worried about the future of Flash either. I don't think it has one." -
Adobe Download Manager Installing Software Without Consent
"Not all is worth cheering about as Adobe turns 20," writes reader adeelarshad82, who excerpts from a story at PC Magazine's Security Watch: "Researcher Aviv Raff has found a problem in ADM (Adobe Download Manager) and the method through which it is delivered from adobe.com. The net effect of the problem is that a user can be tricked into downloading and installing software using ADM without actual consent. Tonight Adobe acknowledged the report and said they were working on the issue with Raff and NOS Microsystems, the company that wrote ADM." -
Next Flash Version Will Support Private Browsing
An anonymous reader writes "The world rolled its eyes when the problem of Flash cookies came to light several months ago. Even if you're careful about cookies or even if you use your browser's private surfing feature, sites can still track you through cookies stored by Flash. However, soon enough the next version of Flash, 10.1, will support private browsing and will integrate with browsers to turn it on when the browser itself is in private browsing mode. Browsers still store data during a private browser session, but they will delete it all at the end of the session. The same will be true of Flash private browsing." -
64-Bit Flash Player For Linux Finally In Alpha
Luchio writes "Finally, a little bit of respect from Adobe with this alpha release of the Adobe Flash Player 10 that was made available for all Linux 64-bit enthusiasts! As noted, 'this is a prerelease version,' so handle with care. Just remove any existing Flash player and extract the new .so file in /usr/lib/mozilla/plugins (or /usr/lib/opera/plugins)." -
Adobe Warns of Reader, Acrobat Attack
itwbennett writes "Monday afternoon, Adobe 'received reports of a vulnerability in Adobe Reader and Acrobat 9.2 and earlier versions being exploited in the wild,' the company said in a post to the company's Product Security Incident Response Team blog. According to malware tracking group Shadowserver, the vulnerability is due to a bug in the way Reader processes JavaScript code. Several 'tests have confirmed this is a 0-day vulnerability affecting several versions of Adobe Acrobat [Reader] to include the most recent versions of 8.x and 9.x. We have not tested on 7.x, but it may also be vulnerable,' Shadowserver said in a post on its Web site. The group recommends that concerned users disable JavaScript within Adobe's software as a work-around for this problem. (This can be done by un-checking the 'Enable Acrobat JavaScript' in the Edit -> Preferences -> JavaScript window). 'This is legit and is very bad,' Shadowserver added." -
Shockwave Vulnerabilities Affect More Than 450 Million Systems
Trinity writes "Researchers from VUPEN have discovered critical vulnerabilities in Adobe Shockwave, a technology installed on over 450 million Internet-enabled desktops. The vulnerabilities could allow remote code execution by tricking a user into visiting a web page using Internet Explorer or even Mozilla Firefox. Version 11.5.1.601 as well as earlier ones are affected. The vendor recommends upgrading to version 11.5.1.602." Especially sobering when you consider Adobe's current push to be essentially required as an intermediary player for anyone who wants to see certain government data. -
Adobe Security Updates For Flash and Shockwave
nlewis writes "Adobe has finally released updates for their Flash and Shockwave Players. These updates should, in theory, address the security issues outlined in this security bulletin. This issue has been mentioned here previously. Don't expect an update to the equally flawed Acrobat Reader until sometime tomorrow, though." -
Adobe Security Updates For Flash and Shockwave
nlewis writes "Adobe has finally released updates for their Flash and Shockwave Players. These updates should, in theory, address the security issues outlined in this security bulletin. This issue has been mentioned here previously. Don't expect an update to the equally flawed Acrobat Reader until sometime tomorrow, though." -
Adobe Security Updates For Flash and Shockwave
nlewis writes "Adobe has finally released updates for their Flash and Shockwave Players. These updates should, in theory, address the security issues outlined in this security bulletin. This issue has been mentioned here previously. Don't expect an update to the equally flawed Acrobat Reader until sometime tomorrow, though." -
State of Sound Development On Linux Not So Sorry After All
An anonymous reader writes "There have been past claims by Adobe and others that development on Linux is a jungle, particularly with regards to audio. However today, the author of the popular 'The Sorry State of Sound in Linux' has posted a follow up showing Adobe's claims to be FUD, as well as being a good update on where OSS and ALSA are holding today, and why PulseAudio isn't a good idea." -
Harsh Words From Google On Linux Development
jeevesbond writes "The alpha version of Google Chrome is now available for GNU/Linux. Google Chrome developer and former Firefox lead Ben Goodger has some problems with the platform though. His complaints range from the lack of a standardised UI toolkit, inconsistencies across applications, the lack of a unified and comprehensive HIG, to GTK not being a very compelling toolkit. With Adobe getting twitchy about the glibc fork and previously describing the various audio systems as welcome to the jungle, is it time to concentrate on consolidation and standardisation in GNU/Linux in general, and the desktop in particular?" -
Harsh Words From Google On Linux Development
jeevesbond writes "The alpha version of Google Chrome is now available for GNU/Linux. Google Chrome developer and former Firefox lead Ben Goodger has some problems with the platform though. His complaints range from the lack of a standardised UI toolkit, inconsistencies across applications, the lack of a unified and comprehensive HIG, to GTK not being a very compelling toolkit. With Adobe getting twitchy about the glibc fork and previously describing the various audio systems as welcome to the jungle, is it time to concentrate on consolidation and standardisation in GNU/Linux in general, and the desktop in particular?" -
Adobe Confirms PDF Zero-Day, Says Kill JavaScript
CWmike writes "Adobe Systems has acknowledged that all versions of its Adobe Reader, including editions for Windows, the Mac and Linux, contain at least one, and possibly two, critical vulnerabilities. 'All currently supported shipping versions of Adobe Reader and Acrobat, [Versions] 9.1, 8.1.4 and 7.1.1 and earlier, are vulnerable to this issue,' said Adobe's David Lenoe said in a blog entry yesterday. He was referring to a bug in Adobe's implementation of JavaScript that went public early Tuesday. A "Bugtraq ID," or BID number has been assigned to a second JavaScript vulnerability in Adobe's Reader. Proof-of-concept attack code for both bugs has already been published on the Web. Adobe said it will patch Reader and Acrobat, but Lenoe offered no timetable for the fixes. In lieu of a patch, Lenoe recommended that users disable JavaScript in the apps. Andrew Storms, director of security operations at nCircle Network Security, said of the suggestion in lieu of patches, 'Unfortunately, for Adobe, disabling JavaScript is a broken record, [and] similar to what we've seen in the past with Microsoft on ActiveX bugs.'" -
Adobe Fixes Recent PDF Flaw, But Not Before Auto Exploit
SkiifGeek writes "With Adobe's patch for the JBIG2Decode vulnerability due in a few days time, new methods to target the vulnerability have been discovered that make it far riskier than previously thought. Didier Stevens recently showed the world how it is possible to exploit the vulnerability without the user actually opening an affected file, and now he has discovered a way that allows for completely automated exploitation that results in anything up to a Local System account without any user interaction at all and only relies upon basic Windows components and Acrobat Reader elements. There are some mitigating factors that limit the overall risk of this new discovery, but it does also highlight that merely uninstalling the Reader will not protect you from exploitation and does raise the possibility that other tools will access the vulnerable components and thus be vectors for attack." However, the fix is now in: nk497 writes "Adobe had finally released a fix for a PDF vulnerability discovered — and already exploited — last month. The update only applies to the most recent versions of Reader and Acrobat, with early versions and Unix editions not fixed until later this month. Adobe has taken its time with the patch, despite an independent security researcher releasing her own fix just days after the flaw was announced." -
Adobe's ADEPT DRM Broken
An anonymous reader writes "I love cabbages has reverse-engineered Adobe's ADEPT DRM (e-book protection). On February 18, I love cabbages released code that decrypts EPUB e-books protected with ADEPT and followed that up on February 25, with code that decrypts PDF e-books protected with ADEPT. On March 4, I love cabbages was given a DMCA take down notice. And there's plenty of evidence he got it right. DS:TNG (Dmitry Sklyarov: The Next Generation)?" -
Adobe To Open Real-Time Messaging Protocol
synodinos writes "Adobe has announced plans to publish the Real-Time Messaging Protocol specification, which is designed for high-performance transmission of audio, video, and data between Adobe Flash Platform technologies. This move that has followed the opening of the AMF spec has been received with varying degrees of enthusiasm from the RIA community." -
Browser Privacy Test
lazyforker writes "A NYTimes blog post reports the results of security researcher Kate McKinley's tests of various browsers' (FireFox, Chrome, IE, Safari) privacy protection mechanisms. Specifically she tested their cookie handling. She also examined their handling of Flash's cookies. In summary: Safari on Mac OS X (in the 'private browsing' mode) is not so private ('quirky'). Safari on XP is not private at all. Flash behaves awfully everywhere." -
Adobe Releases C/C++ To Flash Compiler
SnT2k writes "Adobe recently released the beta version of Alchemy which compiles C/C++ code into AS3 bytecode (which runs on AVM2) that can run on the Flash or Flex platform and boasts increased performance for computationally-intensive tasks (but still slower than native C/C++). It was demonstrated last year during the Chicago MAX 2007 to run Quake. A few months later it has been demonstrated to run a Python interpreter and Nintendo Emulator. One interesting tidbit is that the thing is built upon the open source LLVM Compiler Infrastructure." -
Adobe Releases Preview of 64-bit Flash For Linux
Rinisari writes "Finally, the day has come. Adobe has released a pre-release version of the 64-bit Flash player. It is available at the Adobe Labs Flash Player 10 download site immediately. Where are the Windows and Mac versions? 'Release of this alpha version of 64-bit Flash Player on Linux is the first step in delivering upon Adobe's commitment to make Flash Player native 64-bit across platforms. We chose Linux as our initial platform in response to numerous requests in our public Flash Player bug and issue management system and the fact that Linux distributions do not ship with a 32-bit browser or a comprehensive 32-bit emulation layer by default. Until this pre-release, use of 32-bit Flash Player on Linux has required the use of a plugin wrapper, which prevents full compatibility with 64-bit browsers. With this pre-release, Flash Player 10 is now a full native participant on 64-bit Linux distributions.' Windows and Mac OS X 64-bit versions will follow, and the final versions all will be released simultaneously. Tamarin, the JIT compiler in Flash, is now capable of producing 64-bit code and nspluginwrapper is no longer required. There are, however, no plans to release a debugger version of the 64-bit plugin."