Re: FLASH: [RESPONSE] Recent Flash Player Release

[Tai]

I can understand this reasoning (even though I think it sucks)


will the flash plugin be changed to be like the shockwave plugin? (from

memory it asks for permission to submit the data)...


I was just thinking that if someone really wanted to get data like that

it would be possible combining flash and generator...


by loading an swt with arguments generator could then get an external

datasource based on those args, the external datasource then looks after

the rest of it... I haven't tried this, nor can I be bothered to though

I'm imagining it should work...


also, are there any more little hidden $version type things in flash?


cheers

Tai :)


"Eric J. Wittman" wrote:

> 

> uniqu writes:

> >>However, you leave unaddressed some serious concerns regarding this

> defective player. Furthermore, I do not follow the logic behind the security

> issue.

> 

> According to many online security experts and sites, files/applications

> playing back from one domain should not be able to send or receive

> information from another domain without the users consent. Imagine a site

> where a user password/credit card/social security number, etc. is obtained

> on one page and sent to another domain. Or information behind a firewall is

> obtained and forwarded to another domain. According to the experts, this is

> a no no.

> 

> A few online security resources we use as a part of our consulting process

> are:

> o http://securityfocus.com

> o http://packetstorm.securify.com

> 

> Hope this provides a better understanding.

> 

> A side note, in TechNote #14213 in the Macromedia Flash Support Center, we

> do provide the recommended process.

> 

> Best,

> Eric J. Wittman

> Senior Product Manager, Flash

> ---------------------------------

> 

> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

>   To unsubscribe or change your list settings go to

>

http://www.chinwag.com/flasher or email helpchinwag [dot] com

-- 

] T A I   E L L I O T T


] S P I K E


] Senior Multimedia Designer/Developer


]

taispike [dot] com [dot] au

] tel: 61 2 9328 2941 

] mob: 0413 606 252


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  To unsubscribe or change your list settings go to

http://www.chinwag.com/flasher or email

helpchinwag [dot] com