![]() “I was finding one bug a day at the start,” she said. Silvanovich said during her talk that despite the rancor against Flash and demands for it to be deprecated, things are better. Project Zero team member Natalie Silvanovich said during a talk at the recent Infiltrate Conference in April that she spends most of her day looking at Flash Player vulnerabilities, and shared a timeline spanning back to the start of 2015 Flash bugs she and others at Google found and reported. Adobe continues patch Flash Player at a monthly or better frequency, having already this year pushed out a pair of out-of-band emergency updates addressing zero-day vulnerabilities under attack. ![]() Members of Google’s Project Zero research outfit have been instrumental in finding and privately disclosing vulnerabilities in Flash Player. “This change reflects the maturity of HTML5 and its ability to deliver an excellent user experience.” ![]() “While Flash historically has been critical for rich media on the web, today in many cases HTML5 provides a more integrated media experience with faster load times and lower power consumption,” LaForge said. LaForge said in a post to the Chromium-dev mailing list that the whitelist would disappear after one year, and in the interim, sites would be removed from the list if usage no longer warrants an exception. “We will continue to ship Flash Player with Chrome, and if a site truly requires Flash, a prompt will appear at the top of the page when the user first visits that site, giving them the option of allowing it to run for that site,” said Anthony LaForge, a technical program manager with the Google Chrome team. Google is the latest, announcing recently that by Q4 of this year, HTML5 would be the default in the Chrome browser, except for content on 10 high-traffic, high-profile sites such as YouTube, Facebook, Yahoo, Amazon, Twitch and. ![]() As zero days in Adobe Flash Player continue to bubble to the surface, major technology players are announcing their plans to shove the maligned software aside in favor of HTML5. ![]()
0 Comments
Leave a Reply. |