Skip to main content
Participant
January 30, 2017
Answered

Chrome & Flash

  • January 30, 2017
  • 1 reply
  • 1174 views

I read this article here -- http://www.bbc.com/news/technology-36301904 -- dated 16 May 2016, titled "Google to phase out full support for Flash on Chrome". In the article it says that "Chrome will use alternative technologies, such as HTML5, to play video. Where only Flash is available, browser users will be asked if they want to allow the software to run and then will remember which sites have permission to run Flash so users are not endlessly bothered with pop-ups".

My question is; "What does this mean for those of us with a Chromebook that has Flash built into the O.S.?".

This topic has been closed for replies.
Correct answer jeromiec83223024

Flash Player is a built-in component of Chrome (including Chrome on ChromeOS), and under normal circumstances, would stay synced with the browser.   Chrome actually has two different updaters inside of it, and they've been working to use the Component Updater for Flash updates, because it solves a number of load and logistics problems.  The transition has not been perfect, and they're still continuing to identify issues and resolve them.

It's a long-term win, but as we can attest to ourselves, writing installers for a large population means that anything that possibly can go wrong, will go wrong, given a population at Flash Player or Chrome scales.

Updates on Chrome are rolled out gradually across the population, which helps to soften the network impact of the entire Chrome user-base downloading an update simultaneously, but even then, I'd expect you to have received it at this point.  We're on a monthly release cycle, so we're already halfway through the release.

If you go to chrome://components, you might be able to force the update.  Just click on "Check for Update" and see if it updates.  If it doesn't, I'd recommend that you reach out to the appropriate support channel for your Chromebook.  Something isn't right there, but it doesn't have anything to do with the larger Flash and HTML ecosystem.  Those changes are really about reigning in abusive advertising and tracking practices that marketers have deployed over the years (stuffing 10 invisible ads in a page, or writing a tracking beacon that sends a continuous stream of data eats batteries like crazy), and making it much, much harder to reliably deploy malware through insecure ad networks and watering holes.  (We also continue to invest heavily in security hardening, in collaboration with Project Zero, Microsoft, and the larger security community, to apply the latest research and OS and compiler defenses as they become available.)

Hope that helps!

1 reply

jeromiec83223024
Inspiring
January 31, 2017

Unfortunately, bloggers don't necessarily hold themselves to the highest journalistic standards, especially in a world where headline click-throughs are what pays the bills, not quality reporting.

I'd highly recommend that you read the actual authoritative statement from Google.

https://groups.google.com/a/chromium.org/forum/#!searchin/chromium-dev/HTML5$20by$20default/chromium-dev/0wWoRRhTA_E/__E3jf40OAAJ

Here's the relevant excerpt:

Summary

Navigator.Plugins() and Navigator.MimeTypes() will only report the presence of Flash Player if the user has indicated that the domain should execute Flash, or if the site is in one of the Top 10 domains using Flash.

Motivation

While Flash historically has been critical for rich media on the web, today in many cases HTML5 provides a more integrated media experience with faster load times and lower power consumption.  This change reflects the maturity of HTML5 and its ability to deliver an excellent user experience.  We will continue to work closely with Adobe and other browser vendors to keep moving the web platform forward, in particular paying close attention to web gaming.

Details

Later this year we plan to change how Chromium hints to websites about the presence of Flash Player, by changing the default response of Navigator.plugins and Navigator.mimeTypes.  If a site offers an HTML5 experience, this change will make that the primary experience.  We will continue to ship Flash Player with Chrome, and if a site truly requires Flash, a prompt will appear at the top of the page when the user first visits that site, giving them the option of allowing it to run for that site (see the proposal for the mock-ups).

To reduce the initial user impact, and avoid over-prompting, Chrome will introduce this feature with a temporary whitelist of the current top Flash sites(1).  This whitelist will expire after one year, and will be periodically revisited throughout the year, to remove sites whose usage no longer warrants an exception.

Chrome will also be adding policy controls so that enterprises will be able to select the appropriate experience for their users, which will include the ability to completely disable the feature.

(1) Where aggregate usage of a specific domain puts it in the top 10 domains using Flash, based on Chrome’s internal metrics.  Those sites currently are:

  1. YouTube.com
  2. Facebook.com
  3. Yahoo.com
  4. VK.com
  5. Live.com
  6. Yandex.ru
  7. OK.ru
  8. Twitch.tv
  9. Amazon.com
  10. Mail.ru

There's also a presentation that clarifies what the experience will look like moving forward:

HTML5 by Default - Google Slides

Participant
February 1, 2017

Thank you for directing me to more info on this, jeromiec83223024 .

I'm assuming then, that with each Chrome OS update, Flash will update along with it (that is, if any Adobe Flash updates are available at that time). Would you know if I'm I right on that? I'm asking because the latest available version of Adobe Flash for Chrome OS is: 24.0.0.194 . However, the version of Adobe Flash that I have on my Chromebook is:  24.0.0.186 , even though my Chromebook is up to date.  I hope I won't be stuck at .186 forever!

jeromiec83223024
jeromiec83223024Correct answer
Inspiring
February 1, 2017

Flash Player is a built-in component of Chrome (including Chrome on ChromeOS), and under normal circumstances, would stay synced with the browser.   Chrome actually has two different updaters inside of it, and they've been working to use the Component Updater for Flash updates, because it solves a number of load and logistics problems.  The transition has not been perfect, and they're still continuing to identify issues and resolve them.

It's a long-term win, but as we can attest to ourselves, writing installers for a large population means that anything that possibly can go wrong, will go wrong, given a population at Flash Player or Chrome scales.

Updates on Chrome are rolled out gradually across the population, which helps to soften the network impact of the entire Chrome user-base downloading an update simultaneously, but even then, I'd expect you to have received it at this point.  We're on a monthly release cycle, so we're already halfway through the release.

If you go to chrome://components, you might be able to force the update.  Just click on "Check for Update" and see if it updates.  If it doesn't, I'd recommend that you reach out to the appropriate support channel for your Chromebook.  Something isn't right there, but it doesn't have anything to do with the larger Flash and HTML ecosystem.  Those changes are really about reigning in abusive advertising and tracking practices that marketers have deployed over the years (stuffing 10 invisible ads in a page, or writing a tracking beacon that sends a continuous stream of data eats batteries like crazy), and making it much, much harder to reliably deploy malware through insecure ad networks and watering holes.  (We also continue to invest heavily in security hardening, in collaboration with Project Zero, Microsoft, and the larger security community, to apply the latest research and OS and compiler defenses as they become available.)

Hope that helps!