Welcome!
Important information
-- Spectre and Meltdown vulnerabilities
-- Change in MX sources

News
-- MX Linux on social media: here
-- Mepis support still here

Current releases
-- MX-17.1 Final release info here
-- antiX-17 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

Blocking Flash Local Shared Objects

Here users can ask questions about security and tutorials about security can be posted to help others, too.
Message
Author
User avatar
joany
Forum Veteran
Forum Veteran
Posts: 5919
Joined: Mon Feb 12, 2007 1:45 pm

Blocking Flash Local Shared Objects

#1 Post by joany » Sun Apr 13, 2014 8:46 am

I stumbled across this article in Info World that has security implications: http://www.infoworld.com/t/anti-spyware ... 2?page=0,0

There's no date shown in the article, so I don't know how old it is. Basically, the article advises changing your flash settings to reduce your vulnerability to snooping via flash cookies, and to prevent third parties from do things like commandeering your computer's microphone and camera, storing things on your computer, or turning your computer into a "network zombie." These changes are facilitated through several "Control Panels" found on this Macromedia website: http://www.macromedia.com/support/docum ... ger02.html

The settings have to be done for each of your computers separately. I don't even know whether this site can be trusted ... you can never be sure these days. According to RMS you can't trust any proprietary software vendors. But of course you also have the option to disable flash entirely.
MX-14; 3.12-0.bpo.1-686-pae kernel using 4GB RAM
2.4GHz AMD Athlon 4600+
NVidia GeForce 6150 LE; 304.121 Display Driver
You didn't slow down because you're old; you're old because you slowed down.

User avatar
Jerry3904
Forum Veteran
Forum Veteran
Posts: 21806
Joined: Wed Jul 19, 2006 6:13 am

Re: Blocking Flash Local Shared Objects

#2 Post by Jerry3904 » Sun Apr 13, 2014 9:06 am

Have you looked at the MX Flash app?
Production: 4.15.0-1-amd64, MX-17.1, AMD FX-4130 Quad-Core, GeForce GT 630/PCIe/SSE2, 8 GB, Kingston SSD 120 GB and WesternDigital 1TB
Testing: AAO 722: 4.15.0-1-386. MX-17.1, AMD C-60 APU, 4 GB

User avatar
joany
Forum Veteran
Forum Veteran
Posts: 5919
Joined: Mon Feb 12, 2007 1:45 pm

Re: Blocking Flash Local Shared Objects

#3 Post by joany » Sun Apr 13, 2014 9:47 am

Jerry3904 wrote:Have you looked at the MX Flash app?
I see it here: http://www.mepiscommunity.org/doc_mx/mxapps.html#flash

But I assumed it only installs/removes flash. I don't see anything about configuring or restricting how flash operates.
MX-14; 3.12-0.bpo.1-686-pae kernel using 4GB RAM
2.4GHz AMD Athlon 4600+
NVidia GeForce 6150 LE; 304.121 Display Driver
You didn't slow down because you're old; you're old because you slowed down.

User avatar
Jerry3904
Forum Veteran
Forum Veteran
Posts: 21806
Joined: Wed Jul 19, 2006 6:13 am

Re: Blocking Flash Local Shared Objects

#4 Post by Jerry3904 » Sun Apr 13, 2014 9:52 am

No, but it allows you to set up automatic upgrade to stay ahead of exploits.
Production: 4.15.0-1-amd64, MX-17.1, AMD FX-4130 Quad-Core, GeForce GT 630/PCIe/SSE2, 8 GB, Kingston SSD 120 GB and WesternDigital 1TB
Testing: AAO 722: 4.15.0-1-386. MX-17.1, AMD C-60 APU, 4 GB

User avatar
joany
Forum Veteran
Forum Veteran
Posts: 5919
Joined: Mon Feb 12, 2007 1:45 pm

Re: Blocking Flash Local Shared Objects

#5 Post by joany » Sun Apr 13, 2014 10:13 am

Jerry3904 wrote:No, but it allows you to set up automatic upgrade to stay ahead of exploits.
Oh ...

I think the gist of the article was that flash has certain default "features" that aren't exploits, security holes, or bugs in the usual sense. They are not going to disappear through security updates. Adobe intentionally built them into flash for providing what they may have believed were useful and legitimate functions; however, it is now clear that those "features" have been turned against the users. But even though Adobe won't be removing these "features" now or in the future, at least they are offering us a way to turn them off ... or so we are led to believe.
MX-14; 3.12-0.bpo.1-686-pae kernel using 4GB RAM
2.4GHz AMD Athlon 4600+
NVidia GeForce 6150 LE; 304.121 Display Driver
You didn't slow down because you're old; you're old because you slowed down.

User avatar
richb
Administrator
Posts: 16756
Joined: Wed Jul 12, 2006 2:17 pm

Re: Blocking Flash Local Shared Objects

#6 Post by richb » Sun Apr 13, 2014 10:19 am

Joany, Is this different than right clicking on a flash video, picking settings, and making the changes?
Forum Rules
Guide - How to Ask for Help

Rich
SSD Production: MX 17.1
AMD A8 7600 FM2+ CPU R7 Graphics, 16 GIG Mem. Three Samsung EVO SSD's 250 GB, 350 GB HD

User avatar
joany
Forum Veteran
Forum Veteran
Posts: 5919
Joined: Mon Feb 12, 2007 1:45 pm

Re: Blocking Flash Local Shared Objects

#7 Post by joany » Sun Apr 13, 2014 10:28 am

richb wrote:Joany, Is this different than right clicking on a flash video, picking settings, and making the changes?
It's very similar. Thanks for pointing this out.
You do not have the required permissions to view the files attached to this post.
MX-14; 3.12-0.bpo.1-686-pae kernel using 4GB RAM
2.4GHz AMD Athlon 4600+
NVidia GeForce 6150 LE; 304.121 Display Driver
You didn't slow down because you're old; you're old because you slowed down.

User avatar
kmathern
Forum Veteran
Forum Veteran
Posts: 9277
Joined: Wed Jul 12, 2006 2:26 pm

Re: Blocking Flash Local Shared Objects

#8 Post by kmathern » Sun Apr 13, 2014 10:47 am

The `Adobe Flash Player Preferences` is also installed when you use the MX Flash app to install or update flash.

User avatar
joany
Forum Veteran
Forum Veteran
Posts: 5919
Joined: Mon Feb 12, 2007 1:45 pm

Re: Blocking Flash Local Shared Objects

#9 Post by joany » Sun Apr 13, 2014 11:41 am

kmathern wrote:The `Adobe Flash Player Preferences` is also installed when you use the MX Flash app to install or update flash.
Ah yes, I see it in Whisker when running xfce. However, this app didn't make it over to the KDE Application Launcher when I installed KDE. I'll have to add this to the menu myself if I can locate the executable file that launches it. Thanks for pointing it out. In xfce this runs without root permissions. Wonder why. :hmm:

EDIT:

Nope. /usr/sbin/mx-flash only runs in xfce.

EDIT(2):

This would make a nice addition to the CR for MEPIS users. Hint, hint.
Last edited by joany on Sun Apr 13, 2014 12:00 pm, edited 1 time in total.
MX-14; 3.12-0.bpo.1-686-pae kernel using 4GB RAM
2.4GHz AMD Athlon 4600+
NVidia GeForce 6150 LE; 304.121 Display Driver
You didn't slow down because you're old; you're old because you slowed down.

User avatar
kmathern
Forum Veteran
Forum Veteran
Posts: 9277
Joined: Wed Jul 12, 2006 2:26 pm

Re: Blocking Flash Local Shared Objects

#10 Post by kmathern » Sun Apr 13, 2014 11:59 am

joany wrote:
kmathern wrote:The `Adobe Flash Player Preferences` is also installed when you use the MX Flash app to install or update flash.
Ah yes, I see it in Whisker when running xfce. However, this app didn't make it over to the KDE Application Launcher when I installed KDE. I'll have to add this to the menu myself if I can locate the executable file that launches it. Thanks for pointing it out. In xfce this runs without root permissions. Wonder why. :hmm:...
The .desktop file that it installs (/usr/share/applications/flash-player-properties.desktop) hides it if you're using KDE
cat /usr/share/applications/flash-player-properties.desktop
[Desktop Entry]
Name=Adobe Flash Player
Comment=Preferences for Adobe Flash Player
Comment[bg]=Настройки за Adobe Flash Player
Comment[ca]=Preferències quant a la Adobe Flash Player
Comment[de]=Einstellungen zur Adobe Flash Player
Comment[es]=Preferencias para Adobe Flash Player
Comment[fr]=Préférences pour Adobe Flash Player
Comment[gl]=Preferencias para Adobe Flash Player
Comment[nb]=Brukervalg for Adobe Flash Player
Comment[nl]=Voorkeuren voor Adobe Flash Player
Comment[pl]=Preferencje Adobe Flash Player
Comment[pt]=Preferências para a Adobe Flash Player
Comment[pt_BR]=Preferências para o Adobe Flash Player
Comment[ru]=Настройки для Adobe Flash Player
Comment[sk]=Predvoľby pre Adobe Flash Player
Comment[sv]=Inställningar för Adobe Flash Player
Exec=flash-player-properties
Icon=flash-player-properties
Terminal=false
Type=Application
StartupNotify=true
Categories=Settings;GNOME;GTK;X-GNOME-PersonalSettings;
NotShowIn=KDE;

Post Reply

Return to “Security”