Month: July 2015

art-and-sterf:

elusiveemerald:

Or vulnerability or whatever. Basically put, some posts have been floating around stating that some hackers managed to worm their way into Adobe Flash and could crash and hack into a computer, and this is absolutely true. However, what most posts I’ve seen done is jump to conclusions and assume the worst; everyone is prone to danger, turn off Flash, hide yo kids and hide yo wives. Which, well, isn’t true.

On the same page that I linked, Adobe states that “

A critical vulnerability (CVE-2015-5119) has been identified in Adobe Flash Player 18.0.0.194 and earlier versions for Windows, Macintosh and Linux”, which is still super omega bad. However, as I went to hastily turn off my Flash as some people posted to do, I double-checked what version I was on, and found out that I was on 18.0.0.203, and that is the current version as of late. I found out by checking this link here, which is an Abode website. Or, if you’re weary of trusting any links right now, you can just “right-click on content running in Flash Player and select “About Adobe (or Macromedia) Flash Player” from the menu”, and you should check and repeat the process for each browser if you have multiple browsers.

Does that mean that everyone should go slack and throw caution to the wind? Nah, son, don’t do that. Instead, just proceed with caution, but so long as you have Adobe Flash ver 18.0.0.203, you should be okay and you shouldn’t have to turn off your Flash. I honestly don’t know why people were suggesting that to begin with.

-Admine Riker

They were suggesting this because 18.0.0.203 was only released today; meanwhile the vunerability has been know about since Monday, and has been spotted in the wild beginning yesterday (7/7/2015.)

joyeuse-noelle:

s-q-l:

somedudeslife:

Please disable Adobe Flash until further notice. A group of hackers have hacked into the program for it and leaked a vulnerability that lets a malicious program do whatever it wishes to your computer via flash. This is currently ranked as a critical rating by Adobe.

These can mean forcing different sites to appear with flash on it (Screamers or revolting videos) and possibly encrypting your entire HDD.

As of writing this post (July 8th, 2015), the CERT/CC is currently unaware of a practical solution to this problem.

Please, do not open any untrusted flash content. Try to avoid opening flash content in general. I am begging you to share this information. Make your own posts, tell your family and friends, or anyone you know who has a computer. This is for you and your computer’s safety.

Source: Adobe and CERT

please dont spread this ‘hacker’ bullshit around.. shit like this comes up every time yall become aware of something computer-related.

a bug in adobe flash’s code =/= HAXORS OUT TO GET U

nobody can encrypt your files through a flash player. no one can put up random flash players in places unless they got a hold of the source of the website itself. theres no ‘malicious program doing what it wants’ running around. please stop trying to make people paranoid for no reason.

Did you… did you read the articles? Adobe themselves have said that the vulnerability allows an attacker to run arbitrary code on the target system and potentially take control of it, and that at least one exploit has already been published. By “take control”, they literally mean “anything the currently-operating user could do, an attacker could also do”, which includes opening browser windows and encrypting/deleting files.

It’s true that nobody “hacked into the program”, but people did leak a legitimate critical vulnerability with at least one known attack vector. This isn’t Tumblr users shrieking about scary bears, this is CERT and Adobe saying “don’t run untrusted Flash files until you know you have the version that fixes this bug”.

(Yes, a new version that fixes the bug has been released. Go here to check your Flash player version: http://www.adobe.com/software/flash/about/.)

It is, by the way, actually being seen in the wild now.