Home Messages Index
[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index

Re: [News] Why Flash is Evil: Spyware to the Max

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

____/ Gregory Shearman on Sunday 19 October 2008 22:16 : \____

> On 2008-10-19, Tony Sivori <TonySivori@xxxxxxxxx> wrote:
>> On Sat, 18 Oct 2008 01:41:59 +0100, Homer wrote:
>>
>>> Verily I say unto thee, that Tony Sivori spake thusly:
>>> 
>>>> Even after following the instructions (including setting storage to
>>>> zero to prevent future infestation) on the imasuper.com and Adobe
>>>> websites I still have two .sol files, plus many more "shared" files
>>>> that are from specific websites, like Office Depot. Best Buy, YouTube,
>>>> and news sites.
>>>> 
>>>> There's even one from Twitter, and as best I know I never been to that
>>>> site. I know I've never used Twitter.
>>> 
>>> Try the sledgehammer approach:
>>> 
>>> rm -fr .macromedia/* .adobe/*
>>> chmod 400 .macromedia .adobe
>>
>> I'm tempted.
>>
>>> You could also try an SELinux policy that effectively blocks
>>> libflashplayer.so from writing to context user_home_t.
>>
>> I've found that turning off local storage breaks Flash. I set the local
>> storage to zero. The next day while browsing newegg for a video card, I
>> found that trying to view the detailed pictures resulted in Flash asking
>> for permission to store local content. Most annoyingly, the picture I
>> wanted came up, but the permission box blocked it, and the permission box
>> could not be dragged to the side. Denying permission didn't work either,
>> when I did that the picture went away.
>>
>> Long story short, if you want to use Flash, you have to allow local
>> storage.
>>
>> I guess the best solution (for me at least) is to purge the stored Flash
>> files whenever I decide it is time to delete browser cache, history, and
>> cookies.
> 
> I put mine in my local crontab (vixie cron):
> 
> @hourly rm -rf ~/.macromedia ~/.adobe/Flash_Player
> 
> This works fine.

Thanks. Just done that too.

- -- 
                ~~ Best of wishes

Roy S. Schestowitz     | D-I-S-C-O becomes D-I-E S-C-O
http://Schestowitz.com  |  GNU is Not UNIX  |     PGP-Key: 0x74572E8E
      http://iuron.com - proposing a non-profit search engine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkj7xMEACgkQU4xAY3RXLo6t/QCfRBjz4oTWTfbB5qoHYmY3eLki
DKEAoKFEZQg9yGJZgqLDXTNWiYKekl7C
=PsoB
-----END PGP SIGNATURE-----

[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index