Skip to main content
Participant
March 14, 2007
Question

Change Flash Security Settings? Security Manager Offline?

  • March 14, 2007
  • 1 reply
  • 1400 views

Hello

I have downloaded firefox and flash player, I have content which when I run it, flash blocks it wisely and reports that the page is trying to access other content etc.

I need to allow the accessing to other content but I dont have internet at home, I understand I need the global manager security settings panel which of course shows fine on this intenet conencted machine but at home it just brings up a dead URL because of no tcp/adsl etc.


I am sure this is a standard question answered millions of times before Im sorry to bother you guys, Have a great year every one and good luck Adobe.

    This topic has been closed for replies.

    1 reply

    Participant
    March 14, 2007
    The reason you can't access it offline is because adobe flash player is effectively a trojan. There is absolutely no reason to not have local, offline access to adjust settings to a local piece of software, even if it is a plug-in. That goes to the heart of it right there. The settings are stored locally, so what the hell is the GSM doing? Well, it's doing what it specifically says it is not going to do (on the GSM page) and modifies personal data on your system. These settings may be benign but the method employed is typical virus behavior. Adobe has never given a reason because they know they have a front door into everyone's machine that made the mistake of installing the flash player plug-in. Even microsoft had a big deal about it because they put it in the WinXP install and sure enough, flash player had a huge security hole. They knew it and did nothing. Adobe knew it and didn't care.

    You might look for a hack that modifies the settings locally rather than relying on a known virus-type of access that adobe clearly wants to your system.

    Adobe should be set on fire for this kind of behavior.

    btw:
    check out this file: (it'll be on your local machine)

    \documents and settings\(your username)\application data\macromedia\flash player\macromedia.com\support\flashplayer\sys\

    and the file is

    settings.sol (it's a binary file)

    SWF should never be allowed to modify anything, it's supposed to play animations, yet adobe's ocx (the plug-in) seems to do just that without any notification or warning that it's going to do something to your local system. Again, this is classic virus behavior; performing some unwanted/unwarranted task(s) without notice. I've play with the flash maker before, I remember you could do some things with clickable links. But nowhere do I recall it giving the ability to modify someones local files, that was just too much freedom.

    adobe needs to either fix this or drop flash player. I know it's fairly prevalent on the web, but with security risks like these that adobe doesn't want to fix it's just dynamite. Better yet, how about make our flash swf files able to access adobes' internal network? Sounds fair to me.

    You'll also probably see a bunch (or just a few or even none) of directories that start with # in the ...\sys directory. Under which each one may have another settings.sol file. If you do a little research on the web you can find a ton of people who've had security holes opened because of entries in these files. adobe may want to deny it but you can read about it all over the place. adobe flash player has even been at issue with rootkits (look them up, quite nasty) and the problems that go with them. So yeah, adobe reached a new low the first time I saw that.

    It's crap software like this that gets unleashed on the unsuspecting public and techs like myself have to clean it up. Furthermore, we have to try and find alternatives to what has become too well-established. Flash became popular before people really paid any attention to what adobe was actually doing on their systems. That's why everytime I have to uncorrupt a system I go looking for things like the flash player plugin. Some days it's so bad I'd like to see a plane hit the adobe hq, that'd be some justice.

    If only companies like adobe would release trustworthy software, yeah, I'm still looking for the pigs with wings.

    And yet still more bs: while almost every piece of software I've ever installed goes into it's own directory or under ..\program files\... look where adobe puts itself. Deep inside ...\Windows\...

    Here's where I found mine
    C:\WINDOWS\system32\Macromed\
    with several different directories under there. Like a damn tick it burrowed itself into the main windows directory. Which is also typical of a virus.