Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Exit
xmlilley
Community Beginner
xmlilley
Community Beginner
Activity
‎Jul 10, 2015
06:37 AM
Is there a link direct to the full 'offline installer' so that we could compare it to this one?
... View more
‎Jul 10, 2015
03:30 AM
2 Upvotes
Forgive me, Piyush. I'm grateful for your time and assistance, but I think you're missing the point by focusing on the version numbers... You said earlier: Autoupdate or silent update functionality does not mount any DMG to proceed with the update process Yet, we've got mounted DMGs we're not requesting or interacting with, and which have some odd characteristics like unusual logos/branding. So, either: there's some automatic feature you're not aware of, which is mounting legitimate Flash Player updaters that are behaving in an unexpected way that looks risky, or: there is a new security vulnerability loose in the wild that is pretending to be a legitimate Flash Player updater. In which case, we really need to let people know about it. We need to know which it is: #1, or #2? Thank you for anything you can do to clear it up.
... View more
‎Jun 29, 2015
05:54 AM
One conspicuous difference versus the official one I just downloaded is the file size: the installer on the one I downloaded (AdobeFlashPlayer_18_a_install.dmg) is 2.2MB. The mysterious one is 16.6MB. Note, the odd file path in the 'GetInfo' image above is because I made a copy of the image, in case it disappeared, and did GetInfo on the copy. The original one disappeared after a restart, and there's no seemingly-related .dmg to be found.
... View more
‎Jun 29, 2015
05:44 AM
Everything *looks* correct. But, no, I didn't do anything remotely related to downloading a new Flash installer that would explain how it would have been manually mounted. Not even once, let alone twice. Here's the 'GetInfo' on the installer: And here's the terminal output: Identifier=com.adobe.flashplayer.installmanager Format=bundle with Mach-O thin (i386) CodeDirectory v=20200 size=1280 flags=0x0(none) hashes=56+3 location=embedded Signature size=8524 Authority=Developer ID Application: Adobe Systems, Inc. Authority=Developer ID Certification Authority Authority=Apple Root CA Timestamp=Jun 19, 2015, 12:48:46 Info.plist entries=20 TeamIdentifier=JQ525L2MZD Sealed Resources version=2 rules=12 files=38 Internal requirements count=1 size=196 *********************************************** On the surface, everything looks resonable. Except for why the image is appearing automagically without any intervention. That's the one thing that worries me, unless there's some good reason why an image would be downloaded and mount that way. Repeatedly. The one other thing that seems wrong is the branding. I just downloaded the official adobe installer and the Finder window for the mounted image looks like this, completely different from what I posted from the other image that mounted itself:
... View more
‎Jun 28, 2015
03:38 AM
1 Upvote
I'm running Mac OS 10.10.3, Chrome 43, Safari 8.0.6. I have Creative Cloud installed, and have Acrobat Pro, PS, Illustrator and some other tools installed. (Recently updated those to CC 2015, but not until after this situation arose.) Flash Player is installed. Flash Player Help says that I've got the latest on both Chrome and Safari. Which makes sense, as I had believed that Flash Player auto-updates itself. I have consciously permitted it to auto-update. But, I know that the 'Flash Player' identity is often used to induce people to install software they shouldn't install. I had believed that most of those risks were related to web-pages prompting downloads. And so, when a disk image recently appeared on my Mac, seemingly encouraging me to run the installer inside it, I'm worried, because it doesn't fit what I had heard about either safe or explicitly unsafe options. The disk image mounted itself without any involvement from me: I didn't request a download, and there were no dialogs asking if an update would be OK. It's called - logically enough - "Flash Player", and contains a file called "Install Adobe Flash Player". It first happened two weeks or so ago, and then again several days ago (June 24, my time). The first time, I simply closed the image. The second time, I grabbed a screen-capture at the time of what appeared: So, is this a legitimate pattern, to have a .dmg appear like this? When Flash Player says it's going to 'auto-update' does that mean it's just going to dump a disk image into my machine and wait for me to do the work? Is this image possibly a side-effect of a healthy, normal update, and it simply didn't clean up after itself? Now, I'm aware that there was recently a critical update to Flash Player. But, I seem to already have that latest, updated version already. Also, this first happened 2 weeks ago, then again. So, is this thing somehow part of the process of me getting normal updates, or... something else? (Since this is a community forum, I'll be explicit: have you yourself, dear reader, seen this exact behavior, and do you know for a fact that it's part of an approved and safe distribution? Opinions are wonderful, but what I really need are facts. Thank you!)
... View more
Get ready! An upgraded Adobe Community experience is coming in January.
Learn more
Copyright © 2025 Adobe. All rights reserved.
AdChoices