Arch Linux

yossarianuk

Member

Registered: 2007-05-02

Posts: 103

Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

Hi.

Seeing as Adobe in their infinite wisdom have temporarily  closed the 64bit Flash beta - http://labs.adobe.com/technologies/flas … 64bit.html

There is no update from 64bit Linux , so that means the version in your repos - extra/flashplugin 10.0.45.2-1  - has a gaping security hole that allows your computer to be randomly raped by any scum on the internet,

Shouldn't you release an update that removes the vulnerable version and gives a notice explaining why  pacman has removed flash...

I have to say that on my machine the 32bit of flash is slightly buggy even on a fully 32bit Linux distro.

The 64bit version worked pretty much all the time and the video was so much faster - in fact I do not remember a crash since the last update in February  and I was very happy with the performance.

Cheers

denisfalqueto

Member

From: ES, Brazil

Registered: 2006-03-24

Posts: 197

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

I can't say anything about removing from the repos, but I can advice you to use flash block. There're versions for firefox and chrome. You only load the flash that you really want, after clicking on it. A keeper.

---

Satisfied users don't rant, so you'll never know how many of us there are.

FeatherMonkey

Member

Registered: 2007-02-26

Posts: 313

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

Going on the fact people talk about the api for plugins can anyone confirm whether flashblock for chrome actually works as in my thinking if it is like the adblocks which is hiding not blocking then surely it is still exploitable no/yes?

yossarianuk

Member

Registered: 2007-05-02

Posts: 103

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

Thanks - Flash block is good and already saving my CPU....

I just mean that surely a package with such a severe vulnerability should be removed from the repo's...

Right now typing the command

pacman -S flashplugin

Turns the level of security on your ArchLinux desktop to that of Windows.....

clarence

Member

From: fremantle.au

Registered: 2005-10-12

Posts: 294

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

.....maybe 'compromised' would be a better description.....

---

fck art, lets dance.

yossarianuk

Member

Registered: 2007-05-02

Posts: 103

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

clarence - your right but couldn't fit in the word 'compromised' in

Also I think it is an apt description and i guess has a bigger impact.

If I seem annoyed thats becuase I am - not at Arch (in any way) but at adobe ...

Why didn't they just patch the previous version so I can actually use flash............

Last edited by yossarianuk (2010-06-15 12:38:49)

ngoonee

Forum Fellow

From: Between Thailand and Singapore

Registered: 2009-03-17

Posts: 7,358

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

Just use flash with flashblock, what's the issue? Youtube won't be having poisonous flash vids anytime soon....

---

Allan-Volunteer on the (topic being discussed) mailn lists. You never get the people who matters attention on the forums.
jasonwryan-Installing Arch is a measure of your literacy. Maintaining Arch is a measure of your diligence. Contributing to Arch is a measure of your competence.
Griemak-Bleeding edge, not bleeding flat. Edge denotes falls will occur from time to time. Bring your own parachute.

yossarianuk

Member

Registered: 2007-05-02

Posts: 103

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

Looks like someone listened.

http://www.archlinux.org/news/501/

I guess it is better to still include it (as it is the best version to watch full screen video) and flashblock will only help the environment.

Adobe need to get their ass in gear.....

Cheers

Last edited by yossarianuk (2010-06-16 09:21:25)

trusktr

Banned

From: .earth

Registered: 2010-02-18

Posts: 907

Website

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

Seriously, adobe needs to realize most people are moving to 64 bit architectures...

---

joe@trusktr.io - joe at true skater dot io.

Allan

Pacman

From: Brisbane, AU

Registered: 2007-06-09

Posts: 11,487

Website

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

Seriously, adobe needs to realize most people are moving to 64 bit architectures...

Seriously, people should realise that there is no point for a commercial company to support x86_64 Linux without a multilib setup (i.e. very few distros...).

---

PGP Key: F99FFE0FEAE999BD | I develop pacman - buy me a drink!

iBertus

Member

From: Greenville, NC

Registered: 2004-11-04

Posts: 2,228

Re: Shouldn't extra/flashplugin be removed from repos? (to avoid rape)

It works fine with nspluginwrapper. Better than the 64-bit plugin ever worked on my box.