“security” answer to flash FAQ is false

• 

  lucasgonze · Member · Jun 17, 2008 at 5:50 am

  • Copy link
  • Add topic to favorites

  The standard wp.com answer to why Flash can’t be used in the site is that it is security.

  This is false. There is no security risk of any kind.

  No doubt there is a business case for blocking Flash embeds. Maybe it’s a good case, maybe not, that’s your business. But saying that it’s really a security case is bogus.

• 

  raincoaster · Member · Jun 17, 2008 at 5:57 am

  • Copy link

  What on Earth do you mean? Didn’t a Flash security problem take all of Myspace down?
  http://www.techworld.com/security/news/index.cfm?newsid=4740
  http://blog.washingtonpost.com/securityfix/2006/07/myspace_pages_defaced_using_fl.html
  http://osdir.com/ml/security.attrition.infosec-news/2005-11/msg00035.html

  Anyway, if you want to talk to staff the forum’s not the most efficient way to do it.

• 

  thesacredpath · Member · Jun 17, 2008 at 5:57 am

  • Copy link

  Don’t drink the kool-aid, do some research.

  This is just the latest: http://www.microsoft.com/technet/security/bulletin/ms06-069.mspx

• 

  tellyworth · Staff · Jun 17, 2008 at 6:23 am

  • Copy link

  lucasgonze is incorrect. It’s a 100% real live security issue.