Skip to main content
eliots
Participant
October 29, 2018
Question

update security

  • October 29, 2018
  • 1 reply
  • 298 views

Hi folks:

Anyone have any tips on how to make certain that when you get an auto update notification popup on an Adobe product, in my case, acrobat and flash player, that it is

actually coming from Adobe and not some stand in spy site imitating the adobe site?

I always look for adobe.com in the address header since redirects often use the subtle "get.adobe.com/xxx" to lure people in.

then you download malicious trojans or whatever.

Any suggestions?

Windows Home7.0 ver 6.1.on a Sony PC.

This is what downloaded just today but not yet installed.

flashplayer31au_ha_install.exe

thanks

Eliot

    This topic has been closed for replies.

    1 reply

    _maria_
    Legend
    October 29, 2018

    flahpalyer31au_ha_install.exe looks like a legitimate file name.   You can confirm the digital signature/certificate by right-clicking on the file name, selecting properties and then the Digital Certificate tab.

    When in doubt, just go to get.adobe.com/flashplayer to download the update.


    Alternatively, select to have Flash Player updated silently in the background without user interaction (similar to how Chrome & Firefox update silently in the background).  It updates all Flash Player types (ActiveX for IE, NPAPI for Firefox, PPAPI for chromium-based browsers) installed on the system within 24 hours of a new version being available, whereas, the legacy Notification Update mechanism (the one you are referring to) can take up to 7 days to notify a user that an update is available, and it only updates the Flash Player type that actually made the update check.  If multiple browsers are used, it leaves the other browsers with older Flash Player versions installed.  Also, Background Updates do not include any 3rd party offerings, just Flash Player by itself.