Apple Auto-Disables Old Flash Players In Mac OS X 10.7.4
wiredmikey writes "Just released, and coming in at 370 MB in size, the Mac OS X 10.7.4 update includes general OS fixes, and addresses more than 30 security vulnerabilities. But aside from typical security fixes, Apple has made an interesting move in an effort to protect users. Through this latest software update, Safari 5.1.7 will now automatically disable older — and typically more vulnerable — versions of the Adobe Flash player. While many software vendors would prefer OS makers to keep their hands off their software, the move appears to be welcomed by Adobe, which has constantly battled vulnerabilities in its widely installed Flash Player."
More like 730 MB.
Imagine if MS had done this, the bitching here would be enormous. Just like how Palladium was decried by everyone when it was proposed by MS to secure PCs, but when Apple did it with iOS with extreme lockdown DRM, it was the best thing ever and there was not a peep from the same commentators that blasted MS.
This space for rent.
The Adobe Flash installer deletes itself, too, after installation. They really don't want the old, buggy stuff laying around.
Kriston
Last time I had an issue with a virus intrusion attempt, t was acrobat, not flash, that was the vector.
Leave MY computer alone Apple!
That Adobe makes such software that it welcomes other people disabling it.
Safari 5.1.7 is installed AFTER upgrading the OS to 10.7.4. The ~400MB delta or ~1.3GB combo updates applied thru Software Update (700MB delta / 1.55GB combo if downloaded as standalone updaters) bring Safari to 5.1.6 and patch a slew of other pending issues. Then you can run Software Update again and install the ~35MB Safari 5.1.7 update.
As for the disabling of vulnerable versions of third-party software, worth noting that a couple of weeks back during the FlashBack Trojan affaire, after installing the security updates that brought the problem to a halt, the Java browser plugin was disabled by default, the user would need to manually enable it when needed, and it would auto-disable itself again after a few days of inactivity.
Glad to see that Apple is taking all the necessary steps to maintain "no viruses on Apple".
good practice to force people to fucking update! i'm done with helping people with trojan pc's.
This is probably good as Adobe seems to "patch" or provide "updates" to their product every 2hours or so.
This is an issue that all non-OS applications have: how to get and install updates in a timely manner? Firefox checks for updates upon launch; drawback: annoyance for user as this results in an apparent slow launch. Google installs an update service; drawback: many users will disable this service due to the perception that it could slow down the entire system. Adobe Flash Player is a "system plugin" with its own update tool that runs at boot time; drawback: it requires user interaction, thus it is annoying. RealPlayer creates update tasks in the TaskManager; drawback: some users will disable them as they could increase boot/login time and/or are perceived as intrusive/spyware. The only acceptable solution is a system-wide update system, the way it works on Linux but without any user interaction; or updates delivered for all installed applications via Windows Update on Windows (which Microsoft is unlikely to accept).
I understand not offering support or having a important sounding warning but why make it mandatory? I tend to keep my software updated but what if I didn't want to update my software? Why should Apple or any company be able to come in and make changes to my system without me first either giving them permission or setting the computer/software to auto-update?
Seriously, the gaping security holes in their products make me think they have to be consciously designing them that way.
They added their plugin to Firefox without asking in a Windows update. Of course that had nothing to do with security, just profit.
The Poster stated that if he needs Windows or Linux then he can fire them up using VMWare.
So what is so fundamentally wrong with that?
Use the best tool for the job regardless of platform.
I use Windows & Linux in my day job. At home, I use OSX. IT certainly does not get in the way all the time like Windows and is far better at WiFi than Linux.
I also prefer using MS Office on OSX than that stupid ribbon on Windows. I've really tried with OpenOffice but have had great problems with numbered lists inside tables.
I also write short stories and have not found anything to touch Scrivenor for that.
why can't the updates be smaller like the MS ones?
It just works!
when it means Safari?
My updates were around 750MB. I have a 2006 Macbook. I use Google Chrome so Safari is no issue to me.
Yeah, go for it.
paying for security patches is the way to go.
Atari rules... ermm... ruled.