Slashdot Mirror
Facebook's New Chief Security Officer Wants To Set a Date To Kill Flash
An anonymous reader writes: Facebook's new chief security officer, Alex Stamos, has stated publicly that he wants to see Adobe end Flash. This weekend Stamos tweeted: "It is time for Adobe to announce the end-of-life date for Flash and to ask the browsers to set killbits on the same day. Even if 18 months from now, one set date is the only way to disentangle the dependencies and upgrade the whole ecosystem at once."
Can you set an EOL date in the past? Maybe by a decade, give or take a bit? If causality doesn't currently permit that, we should look into patching this functionality into reality as a special case.
So they can stop getting mentioned every time a security vulnerability is exposed?
Use the same date to turn off Facebook too?
Seems as good a time as any.
It is not going to happen. Way too many companies rely on Flash and Flex applications, written by programmers that are long gone. If the browser vendors try to force this, people will just stick with the old browsers that still work, and it will be just like IE6 all over again.
If you're not using HTML5 by now, you're a fucking dinosaur.
Just as people go to museums to see fossils of dinosaurs, people go to Newgrounds, Albino Blacksheep, Dagobah, Homestar Runner, Weebl's Stuff, and the like to view vector animations in SWF format. What would you suggest to convert existing SWF vector animations to HTML5 format or to create new vector animations in HTML5 format?
Hell, VMware just released vsphere 6 a few months ago and it requires flash, it will be under support until 2020/2022 .
There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
Adobe is a strong believer in "There's no such thing as bad publicity."
Sleep your way to a whiter smile...date a dentist!
Spotted the flash 'developer'
I'm so glad there's a move afoot to kill Flash, in which a few well-connected standards goonies who are not satisfied with the rollout for HTML5 think that no campaign to capture hearts and minds is complete without some form of digital strip mining, in which major portions of the Internet heritage are blocked by "newer, better" software and rendered dark, obsolete and broken overnight. It's just like a seat belt law,right? It's all about protecting Joe Sixpack from driving drunk on the web. And the big important players like Facebook have naught but our precious safety as a motive. /SARC
I hated Flash for its abuses and excesses at first, but I have grown fond of the things it has become useful for, and does well. Here is a low level instruction set of instruction and vector graphic primitives that has been used to accomplish amazing feats. Even self-contained and offline feats. Things that will never make it to HTML5 without a serious ride in the newer is better and bigger and much slower (though our processors are faster and memory is bigger so we pretend that it's faster and smaller) bloat-mobile. /NOTSARC
Remember when the Whole Damned World was ready for a GIF-killer? And PNG was one little tiny step away from doing so? The png image format was so ready to dominate the world, and we were maybe a few open source developer weekends away from having a GIFlike format with comparable non-encumbered LZW compression, and (as promised) simple animation too. To be able to animate in full RGB without shoving palettes down our collective throats. Well, some people on the Standards Committee, some <BLINK>anti-blink tag hipsters</BLINK> who were Running With Scissors cut out that promise and proceeded to punt the animate part of the bargain into the Next MNG generation, which would be a video-killer too and would happen Real Soon Now. The upshot was that the PNG rocket sled hit a big pile of jello, While MNG was languishing, a whole generation of web-folk faced difficult times with GIF in which open source tools generated bloaty files unless you compiled them yourself (because they did not to fork money or paperwork to license the LZW) and the world was treated to... more of GIF! It is today's GIF! And do we have those <BLINK>anti-blink tag hipsters</BLINK> to thank? No, that is not really fair, they just wanted to build a better world. But bad decisions in retrospect do happen. /NOTSARC
But Flash is different! Never mind how useful it has become, it must be killed. Because in this silly Collectivist world of planned obsolescence it is not enough to succeed. Something old must be declared evil, be systematically dismantled and ultimately fail not on its own lack of merit, but because some all seeing Standards Committee wishes to keep Joe Sixpack safe while driving drunk on the web. The insurance companies have already factored in the liability for HTML5 vulnerability coverage so we're good there. /SARC
From this day forward, any zero day vulnerabilities in HTML5 code will be tolerated in the civilized manner, and any emerging Flash exploits will be blamed on the Iranians and North Koreans, and those who continue to use and support Flash will have their hip-credentials revoked. /NOTSARC And we're ready to destroy all those vinyl LP phonograph records too, all the music that matters has been reissued, yeah, fuck that old music. /SARC
Because, God Forbid, the whole human race could never just gather to re-write a popular primitive procedural language without creating a shitload of new exploitable errors. It just cannot be done. /SARC
<blink>down the rabbit hole</blink>
Maybe if HTML V5 didn't suck donkey balls Flash would be easier to kill.
HTML V5 is a classic case of "We need to replace X with something" without ever bothering to find out if that something is BETTER than what its replacing! HTML V5, despite being in development for how many years now? Still can't do even half of what Flash can, no animations so all your flash games are right out, its a GIANT resource hog, if you don't believe me just turn off hardware acceleration (which they use to cover how much of a pig it really is) and see how badly it slurps up RAM and CPU. With Flash a 2004 Sempron has no trouble playing 720P at 30FPS, with HTML V5 without a GPU cooking in the background to cover for it anything less than a C2Q is gonna feel like a slideshow and if your mobile doesn't have hardware acceleration? Forget it, its unusable. And this is ignoring the rotting elephant in the room, that Apple and MSFT have loaded the spec with DRM and H.264, the most patent encumbered video format in history...and we want THIS to be a web "standard"? Well I hope you Linux users didn't actually want to be able to watch video in the future.
Does Flash need replacing? Absolutely as I really don't see Adobe managing to fix the numerous issues with the format, but we need to replace it with something better in every way than Flash and so far HTML V5 seems more like a love letter to hardware OEMs and DRM loving corps than it does an actual replacement. When comparing features and performance its not even a side grade its really a downgrade as it can't do as much as the previous format, sucks more resources than the previous format, and has serious patent issues...and this is an "improvement"?
ACs don't waste your time replying, your posts are never seen by me.