<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Critical Security Fixes from Adobe, Microsoft</title>
	<atom:link href="http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/feed/" rel="self" type="application/rss+xml" />
	<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/</link>
	<description>In-depth security news and investigation</description>
	<lastBuildDate>Tue, 21 May 2013 00:40:35 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: PJ</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-98127</link>
		<dc:creator>PJ</dc:creator>
		<pubDate>Sat, 18 Aug 2012 20:17:53 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-98127</guid>
		<description><![CDATA[Automatic updater has failed every time so far for me on a pair of laptops, win7 x32 and x64. It sure checks often enough though.]]></description>
		<content:encoded><![CDATA[<p>Automatic updater has failed every time so far for me on a pair of laptops, win7 x32 and x64. It sure checks often enough though.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sheen</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97984</link>
		<dc:creator>sheen</dc:creator>
		<pubDate>Sat, 18 Aug 2012 01:36:09 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97984</guid>
		<description><![CDATA[what is the different of Shockware &amp; Adobe Flayer Player? TIA]]></description>
		<content:encoded><![CDATA[<p>what is the different of Shockware &amp; Adobe Flayer Player? TIA</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Doug</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97956</link>
		<dc:creator>Doug</dc:creator>
		<pubDate>Fri, 17 Aug 2012 21:05:39 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97956</guid>
		<description><![CDATA[First, my thanks to you, Old School. Your posts are informative. You mentioned earlier in this thread that the lowest interval to check for flash player updates is seven days. Don&#039;t know why it didn&#039;t occur to me before but you turned on the light - this is why I usually find out about an update from another machine or maybe this website before I receive any notice from Adobe.

You asked &quot;Does the auto update function work for other users? How long does the user have to wait before the auto-update software detects an update?&quot;. 

I reviewed the FlashInstall.log found at C:\WINDOWS\system32\Macromed\Flash on six machines, all are running WinXP Pro, four are Dells, two are IBM. Five are set to auto update. Three are on the West coast in Pacific time zone, three are in Hawaii time zone. The West Coast machines are always on, the HI machines are put into standby when not in use. The log uses GMT, here are the update times:
I530	2012-08-15+01-44-54.734
Dell1	2012-08-15+01-59-12.312
Vostro	2012-08-15+05-50-41.625
IBM2	2012-08-15+07-47-12.531
IBM1	2012-08-15+09-21-11.187
I5302	2012-08-15+15-45-24.921
The first two updates occur within 15 minutes of each other, first update was in Hawaii, second on the West coast. About 4 hours later Vostro (in HI) updated. About two hours more and IBM2 (West C) updated. Another hour and half to update IBM1 (West C). Finally I5302 was updated manually - it is set to notify, no notice received. All in all, the auto updates machines updated within eight hours of each other.

Hope this helps answer your question.]]></description>
		<content:encoded><![CDATA[<p>First, my thanks to you, Old School. Your posts are informative. You mentioned earlier in this thread that the lowest interval to check for flash player updates is seven days. Don&#8217;t know why it didn&#8217;t occur to me before but you turned on the light &#8211; this is why I usually find out about an update from another machine or maybe this website before I receive any notice from Adobe.</p>
<p>You asked &#8220;Does the auto update function work for other users? How long does the user have to wait before the auto-update software detects an update?&#8221;. </p>
<p>I reviewed the FlashInstall.log found at C:\WINDOWS\system32\Macromed\Flash on six machines, all are running WinXP Pro, four are Dells, two are IBM. Five are set to auto update. Three are on the West coast in Pacific time zone, three are in Hawaii time zone. The West Coast machines are always on, the HI machines are put into standby when not in use. The log uses GMT, here are the update times:<br />
I530	2012-08-15+01-44-54.734<br />
Dell1	2012-08-15+01-59-12.312<br />
Vostro	2012-08-15+05-50-41.625<br />
IBM2	2012-08-15+07-47-12.531<br />
IBM1	2012-08-15+09-21-11.187<br />
I5302	2012-08-15+15-45-24.921<br />
The first two updates occur within 15 minutes of each other, first update was in Hawaii, second on the West coast. About 4 hours later Vostro (in HI) updated. About two hours more and IBM2 (West C) updated. Another hour and half to update IBM1 (West C). Finally I5302 was updated manually &#8211; it is set to notify, no notice received. All in all, the auto updates machines updated within eight hours of each other.</p>
<p>Hope this helps answer your question.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 67GTV</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97934</link>
		<dc:creator>67GTV</dc:creator>
		<pubDate>Fri, 17 Aug 2012 19:12:58 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97934</guid>
		<description><![CDATA[Sure enough Seymour, when I Googled &quot;adobe flash player msi download&quot; with quotes, I found one Adobe staff member referring a requestor to the same link Jason posted.  The first result points to Jason&#039;s link when Googling &quot;adobe flash player msi&quot; without quotes.  A brief glance at Googling &quot;adobe flash player msi&quot; with quotes did not reveal the link.  I did however, see your post above.  :)

Btw, the distribution link is handy as Adobe&#039;s distribution application form is non-functional.  (I tested it, not believing my co-worker.)]]></description>
		<content:encoded><![CDATA[<p>Sure enough Seymour, when I Googled &#8220;adobe flash player msi download&#8221; with quotes, I found one Adobe staff member referring a requestor to the same link Jason posted.  The first result points to Jason&#8217;s link when Googling &#8220;adobe flash player msi&#8221; without quotes.  A brief glance at Googling &#8220;adobe flash player msi&#8221; with quotes did not reveal the link.  I did however, see your post above.  <img src='http://krebsonsecurity.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>Btw, the distribution link is handy as Adobe&#8217;s distribution application form is non-functional.  (I tested it, not believing my co-worker.)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SeymourB</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97917</link>
		<dc:creator>SeymourB</dc:creator>
		<pubDate>Fri, 17 Aug 2012 18:00:15 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97917</guid>
		<description><![CDATA[There are ways to bypass Flashblock, or at least there were in the past, whereas it&#039;s damn near impossible to bypass Noscript.]]></description>
		<content:encoded><![CDATA[<p>There are ways to bypass Flashblock, or at least there were in the past, whereas it&#8217;s damn near impossible to bypass Noscript.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SeymourB</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97916</link>
		<dc:creator>SeymourB</dc:creator>
		<pubDate>Fri, 17 Aug 2012 17:57:50 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97916</guid>
		<description><![CDATA[Keep in mind you&#039;re not comparing apples to apples. The versions distributed to consumers aren&#039;t distributed as an MSI, which are inherently larger files. MSIs can perform administrative &amp; repair installations and are structured so that you can create transforms (MSTs) from the MSI to customize the installation, none of which are possible with Adobe&#039;s consumer installer.]]></description>
		<content:encoded><![CDATA[<p>Keep in mind you&#8217;re not comparing apples to apples. The versions distributed to consumers aren&#8217;t distributed as an MSI, which are inherently larger files. MSIs can perform administrative &amp; repair installations and are structured so that you can create transforms (MSTs) from the MSI to customize the installation, none of which are possible with Adobe&#8217;s consumer installer.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SeymourB</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97912</link>
		<dc:creator>SeymourB</dc:creator>
		<pubDate>Fri, 17 Aug 2012 17:53:33 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97912</guid>
		<description><![CDATA[While technically true, the fact of the matter is that Googling for &quot;adobe flash player msi&quot; returns that link as the first hit and has done so for the past couple years or so. If Adobe hasn&#039;t bothered to stick the page in their robots.txt file that that long, they&#039;ve got to be on shaky legal ground.]]></description>
		<content:encoded><![CDATA[<p>While technically true, the fact of the matter is that Googling for &#8220;adobe flash player msi&#8221; returns that link as the first hit and has done so for the past couple years or so. If Adobe hasn&#8217;t bothered to stick the page in their robots.txt file that that long, they&#8217;ve got to be on shaky legal ground.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Old School</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97905</link>
		<dc:creator>Old School</dc:creator>
		<pubDate>Fri, 17 Aug 2012 17:18:08 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97905</guid>
		<description><![CDATA[Some day, when you have a slow news day or when you are not having power problems, could you please address the functionality of the Adobe Flash Player Settings Manager and the  auto-update problem.   I realize that you have touched on this problem before, ad nauseam. Quoting your own hand (http://krebsonsecurity.com/2012/06/critical-security-fixes-for-adobe-flash-player/)  &quot;Windows users who have Flash 11.2 or higher installed also have Adobe’s new updater, which is designed to auto-install updates shortly after they’re made available. &quot;   I have never had any success with either of their two systems.   Here is their documentation:
http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html . 
&quot; Beginning with Flash Player 10.3, the Local Settings Manager supersedes this Online Settings Manager for managing global settings on Windows, Mac, and Linux computers. The Local Settings Manager can be accessed in the Control Panel on Windows and in System Preferences on Mac. Users of other operating systems and earlier versions of Flash Player can continue to use the Online Settings Manager described here.

To access the local Flash Player Settings Manager that is native to your operating system:

    Windows: click Start &gt; Settings &gt; Control Panel &gt; Flash Player
    Macintosh: System Preferences (under Other) click Flash Player
    Linux Gnome: System &gt; Preferences &gt; Adobe Flash Player
    Linux KDE: System Settings &gt; Adobe Flash Player&quot;

For Windows 7, the documentation is wrong.  The Settings Manager is in the Systems and Security section and not a separate entry on the Control Panel.   Does the auto update function work for other users?   How long does the user have to wait before the auto-update software detects an update?    I would not push this issue if it were not for the security issues.    THANKS.]]></description>
		<content:encoded><![CDATA[<p>Some day, when you have a slow news day or when you are not having power problems, could you please address the functionality of the Adobe Flash Player Settings Manager and the  auto-update problem.   I realize that you have touched on this problem before, ad nauseam. Quoting your own hand (<a href="http://krebsonsecurity.com/2012/06/critical-security-fixes-for-adobe-flash-player/" rel="nofollow">http://krebsonsecurity.com/2012/06/critical-security-fixes-for-adobe-flash-player/</a>)  &#8220;Windows users who have Flash 11.2 or higher installed also have Adobe’s new updater, which is designed to auto-install updates shortly after they’re made available. &#8221;   I have never had any success with either of their two systems.   Here is their documentation:<br />
<a href="http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html" rel="nofollow">http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html</a> .<br />
&#8221; Beginning with Flash Player 10.3, the Local Settings Manager supersedes this Online Settings Manager for managing global settings on Windows, Mac, and Linux computers. The Local Settings Manager can be accessed in the Control Panel on Windows and in System Preferences on Mac. Users of other operating systems and earlier versions of Flash Player can continue to use the Online Settings Manager described here.</p>
<p>To access the local Flash Player Settings Manager that is native to your operating system:</p>
<p>    Windows: click Start &gt; Settings &gt; Control Panel &gt; Flash Player<br />
    Macintosh: System Preferences (under Other) click Flash Player<br />
    Linux Gnome: System &gt; Preferences &gt; Adobe Flash Player<br />
    Linux KDE: System Settings &gt; Adobe Flash Player&#8221;</p>
<p>For Windows 7, the documentation is wrong.  The Settings Manager is in the Systems and Security section and not a separate entry on the Control Panel.   Does the auto update function work for other users?   How long does the user have to wait before the auto-update software detects an update?    I would not push this issue if it were not for the security issues.    THANKS.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mattias S</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97802</link>
		<dc:creator>Mattias S</dc:creator>
		<pubDate>Fri, 17 Aug 2012 07:54:55 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97802</guid>
		<description><![CDATA[Working now!
Thanks,
/Mattias]]></description>
		<content:encoded><![CDATA[<p>Working now!<br />
Thanks,<br />
/Mattias</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jennifer Kuvlesky</title>
		<link>http://krebsonsecurity.com/2012/08/critical-security-fixes-from-adobe-microsoft/comment-page-1/#comment-97715</link>
		<dc:creator>Jennifer Kuvlesky</dc:creator>
		<pubDate>Thu, 16 Aug 2012 20:33:05 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=16454#comment-97715</guid>
		<description><![CDATA[Here is a handy table to keep track of all recent 3rd party patches - updated weekly. http://bit.ly/O5Sn86]]></description>
		<content:encoded><![CDATA[<p>Here is a handy table to keep track of all recent 3rd party patches &#8211; updated weekly. <a href="http://bit.ly/O5Sn86" rel="nofollow">http://bit.ly/O5Sn86</a></p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Page Caching using memcached (User agent is rejected)
Database Caching 4/25 queries in 0.006 seconds using memcached
Object Caching 389/411 objects using memcached

 Served from: krebsonsecurity.com @ 2013-05-20 20:56:50 by W3 Total Cache -->