<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Critical Flash Player Update Fixes 2 Zero-Days</title>
	<atom:link href="http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/feed/" rel="self" type="application/rss+xml" />
	<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/</link>
	<description>In-depth security news and investigation</description>
	<lastBuildDate>Sun, 26 May 2013 01:30:38 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: JimV</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-157676</link>
		<dc:creator>JimV</dc:creator>
		<pubDate>Wed, 27 Feb 2013 18:31:59 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-157676</guid>
		<description><![CDATA[When FH gives notice that an update to Adobe Flash is available, I make a point of looking at the &quot;technical&quot; tab first to see what the file size of the download for which it offers -- today&#039;s was an insulting joke at 64Kb, when the full installer is 15+Mb.  Who knows what sort of junk crapware is being tagged with the post-stub download, or whether a user is even provided the option of a choice in its installation?

After the previous FH stub installer posting I made a reasoned explanation in my comment on their site about preferring a full installer file rather than a stub, and got roundly flamed by some fanboy jerk for &quot;whining&quot; about their service that were following a bundling-as-profit-center business approach, so ever since I&#039;ve stopped blindly clicking on the summary download link for any of their notifications and generally just use the source vendor link for a direct download.

Adobe doesn&#039;t easily or readily provide the key master version link Brian usually references in his posts on Flash updates, which I&#039;m sure is intended to drive as many people as possible into downloading what they bundle (McAfee or whoever) so as to boost their own profit center revenues.]]></description>
		<content:encoded><![CDATA[<p>When FH gives notice that an update to Adobe Flash is available, I make a point of looking at the &#8220;technical&#8221; tab first to see what the file size of the download for which it offers &#8212; today&#8217;s was an insulting joke at 64Kb, when the full installer is 15+Mb.  Who knows what sort of junk crapware is being tagged with the post-stub download, or whether a user is even provided the option of a choice in its installation?</p>
<p>After the previous FH stub installer posting I made a reasoned explanation in my comment on their site about preferring a full installer file rather than a stub, and got roundly flamed by some fanboy jerk for &#8220;whining&#8221; about their service that were following a bundling-as-profit-center business approach, so ever since I&#8217;ve stopped blindly clicking on the summary download link for any of their notifications and generally just use the source vendor link for a direct download.</p>
<p>Adobe doesn&#8217;t easily or readily provide the key master version link Brian usually references in his posts on Flash updates, which I&#8217;m sure is intended to drive as many people as possible into downloading what they bundle (McAfee or whoever) so as to boost their own profit center revenues.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JCitizen</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-157646</link>
		<dc:creator>JCitizen</dc:creator>
		<pubDate>Wed, 27 Feb 2013 16:01:04 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-157646</guid>
		<description><![CDATA[I just make sure and uncheck anything extra the installers try to put on the machine. FileHippo is too handy to not use it. The other updater tools out there, that I&#039;ve tried are worse - especially CNET&#039;s - that dad-gum thing IS malware!! :O

Here lately though, on Adobe, Brian beats my File Hippo by at least three days now - they&#039;ve fallen down lately - but I must admit, these emergency patches are probably out of FIleHippo&#039;s mission capability.

Even MajorGeeks, who are fairly well known to dispense with junk, now have stub installers with many of the handy utilities listed on their site. It is a grim reality of the money making needs of the sites - otherwise they will probably go away.]]></description>
		<content:encoded><![CDATA[<p>I just make sure and uncheck anything extra the installers try to put on the machine. FileHippo is too handy to not use it. The other updater tools out there, that I&#8217;ve tried are worse &#8211; especially CNET&#8217;s &#8211; that dad-gum thing IS malware!! :O</p>
<p>Here lately though, on Adobe, Brian beats my File Hippo by at least three days now &#8211; they&#8217;ve fallen down lately &#8211; but I must admit, these emergency patches are probably out of FIleHippo&#8217;s mission capability.</p>
<p>Even MajorGeeks, who are fairly well known to dispense with junk, now have stub installers with many of the handy utilities listed on their site. It is a grim reality of the money making needs of the sites &#8211; otherwise they will probably go away.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JimV</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-157642</link>
		<dc:creator>JimV</dc:creator>
		<pubDate>Wed, 27 Feb 2013 15:23:56 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-157642</guid>
		<description><![CDATA[New Flash Player 11.6.602.171 version(s) released today, but beware of FileHippo -- they are pushing a very small stub installer that will then download the Adobe variant which incorporates the McAfee add-in.  Use the direct link Brian provides above to avoid both.]]></description>
		<content:encoded><![CDATA[<p>New Flash Player 11.6.602.171 version(s) released today, but beware of FileHippo &#8212; they are pushing a very small stub installer that will then download the Adobe variant which incorporates the McAfee add-in.  Use the direct link Brian provides above to avoid both.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: BrianKrebs</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-153829</link>
		<dc:creator>BrianKrebs</dc:creator>
		<pubDate>Fri, 15 Feb 2013 01:41:51 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-153829</guid>
		<description><![CDATA[Dana, it just refers to a security vulnerability which the vendor finds out about at the same time as everyone else -- when it is already actively being exploited to attack users. It means that the  vendor has zero days notice to come up with a fix for the flaw.]]></description>
		<content:encoded><![CDATA[<p>Dana, it just refers to a security vulnerability which the vendor finds out about at the same time as everyone else &#8212; when it is already actively being exploited to attack users. It means that the  vendor has zero days notice to come up with a fix for the flaw.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dana Westbrook</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-153799</link>
		<dc:creator>Dana Westbrook</dc:creator>
		<pubDate>Thu, 14 Feb 2013 23:35:13 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-153799</guid>
		<description><![CDATA[Yes, 

in reference to Zero-Day, can you explain to me exactly what this means in terms of computer hackers and technology?

Sincerely,
Dana W.]]></description>
		<content:encoded><![CDATA[<p>Yes, </p>
<p>in reference to Zero-Day, can you explain to me exactly what this means in terms of computer hackers and technology?</p>
<p>Sincerely,<br />
Dana W.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rabid Howler Monkey</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-152547</link>
		<dc:creator>Rabid Howler Monkey</dc:creator>
		<pubDate>Sun, 10 Feb 2013 12:53:05 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-152547</guid>
		<description><![CDATA[JimboC, no apologies are necessary.  Look at it this way, it&#039;s more likely that readers will understand what Adobe is up to with embedded flash content in Microsoft Office documents.

Cheers]]></description>
		<content:encoded><![CDATA[<p>JimboC, no apologies are necessary.  Look at it this way, it&#8217;s more likely that readers will understand what Adobe is up to with embedded flash content in Microsoft Office documents.</p>
<p>Cheers</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JimboC</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-152537</link>
		<dc:creator>JimboC</dc:creator>
		<pubDate>Sun, 10 Feb 2013 11:35:49 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-152537</guid>
		<description><![CDATA[Hi Rabid Howler Monkey,

You&#039;re right, it is only a warning prompt. My apologies for the misunderstanding and for not noticing your prior mention of the same Adobe blog post.

Thanks for the clarification.]]></description>
		<content:encoded><![CDATA[<p>Hi Rabid Howler Monkey,</p>
<p>You&#8217;re right, it is only a warning prompt. My apologies for the misunderstanding and for not noticing your prior mention of the same Adobe blog post.</p>
<p>Thanks for the clarification.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Richard Steven Hack</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-152242</link>
		<dc:creator>Richard Steven Hack</dc:creator>
		<pubDate>Sat, 09 Feb 2013 18:42:57 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-152242</guid>
		<description><![CDATA[Agree about the stubs installers.

I got re-directed to Adobe which as usual prompted me to install the Linux versions whereas I&#039;m looking for the Windows versions for client purposes. That really irritates me because Adobe does not make it easy to override that automatic detection.

I had the same problem with Google Chrome updates, until I found and saved the direct download links for the Windows versions.

There are times when &quot;being helpful&quot; via autodetection is not helpful.]]></description>
		<content:encoded><![CDATA[<p>Agree about the stubs installers.</p>
<p>I got re-directed to Adobe which as usual prompted me to install the Linux versions whereas I&#8217;m looking for the Windows versions for client purposes. That really irritates me because Adobe does not make it easy to override that automatic detection.</p>
<p>I had the same problem with Google Chrome updates, until I found and saved the direct download links for the Windows versions.</p>
<p>There are times when &#8220;being helpful&#8221; via autodetection is not helpful.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rabid Howler Monkey</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-152004</link>
		<dc:creator>Rabid Howler Monkey</dc:creator>
		<pubDate>Fri, 08 Feb 2013 23:57:45 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-152004</guid>
		<description><![CDATA[&quot;Adobe is working on a adding a sandbox for Flash content to Microsoft Office versions prior to 2010 to add another barrier for the attackers to overcome before their attack can begin.

JimboC, it&#039;s not a sandbox.  It&#039;s just a prompt warning the user about executing flash content embedded in Microsoft Office document.  Reread Adobe&#039;s blog.]]></description>
		<content:encoded><![CDATA[<p>&#8220;Adobe is working on a adding a sandbox for Flash content to Microsoft Office versions prior to 2010 to add another barrier for the attackers to overcome before their attack can begin.</p>
<p>JimboC, it&#8217;s not a sandbox.  It&#8217;s just a prompt warning the user about executing flash content embedded in Microsoft Office document.  Reread Adobe&#8217;s blog.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: BrianKrebs</title>
		<link>http://krebsonsecurity.com/2013/02/critical-flash-player-update-fixes-two-zero-days/comment-page-1/#comment-151955</link>
		<dc:creator>BrianKrebs</dc:creator>
		<pubDate>Fri, 08 Feb 2013 21:21:05 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=18867#comment-151955</guid>
		<description><![CDATA[:)

Yep, Chrome very often will update its built-in Flash player a day or more in advance of the official patch from Adobe, although prior to this update I experienced a few cases where they lagged Adobe&#039;s advisories. Good to see that they&#039;re back in front!]]></description>
		<content:encoded><![CDATA[<p> <img src='http://krebsonsecurity.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>Yep, Chrome very often will update its built-in Flash player a day or more in advance of the official patch from Adobe, although prior to this update I experienced a few cases where they lagged Adobe&#8217;s advisories. Good to see that they&#8217;re back in front!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Page Caching using memcached (User agent is rejected)
Database Caching 6/26 queries in 0.006 seconds using memcached
Object Caching 387/411 objects using memcached

 Served from: krebsonsecurity.com @ 2013-05-25 21:32:19 by W3 Total Cache -->