After Twenty Years of Flash, Adobe Kills the Name (thestack.com)
An anonymous reader writes: From January 2016, Adobe Flash will be renamed to 'Adobe Animate CC', killing one of the most unfortunate names in web security as the company pushes the product further and further to HTML5 output. Adobe's release about the update, which will form part of the annual Creative Cloud upgrade, states that a third of all material output from the program is now HTML5. The transitional HTML5 Adobe animation program Edge Animate will be replaced by the renamed Flash product.
A Rose by any other name still smells as sweet.
Adobe Flash by any other name still reeks of shit.
I think I remember that from one of my computer-security classes. Sanitize all your inputs, do length checks to avoid buffer overflows, and if those don't work, change your product's name.
VMware vSphere Web Client need to go HTML5 and dump the flash as well.
The FBI attacked Tor users this way last year; that attack is only known to the public because it was revealed in court proceedings. I don't know about you, but I'm going to assume there are still other JS exploits out there being used (by good and bad guys) that haven't yet become public.