[Presumably this is “coming soon” as I am unable to see any change in the behaviour of my FireFox: v39.0 (no pending updates) on OS X. YMMV]


Posted today onto Twitter by Mark Schmidt (Head of @Firefox Support at @Mozilla, the makers of FireFox browser):

It's day four of multiple critical Flash vulnerabilities and still hasn't disabled Flash Player.

…and then, 2 hours later:

BIG NEWS!! All versions of Flash are blocked by default in Firefox as of now. https://t.co/4SjVoqKPrR #tech #infosecpic.twitter.com/VRws3L0CBW

— Mark Schmidt (@MarkSchmidty) July 14, 2015

To be clear, Flash is only blocked until Adobe releases a version which isn't being actively exploited by publicly known vulnerabilities.

— Mark Schmidt (@MarkSchmidty) July 14, 2015






…from:
https://support.mozilla.org/en-US/kb/keep-flash-up-to-date-and-troubleshoot-problems#firefox:mac:fx39
http://www.engadget.com/2015/07/14/firefox-blocks-flash/?ncid=rss_truncated


Firefox now blocks Flash automatically

blogger-avatarby Daniel Cooper | @danielwcooper  | 3 Hours Ago

Flash is the Justin Bieber of browser plugins: it's everywhere, it does nothing useful and every time you see it you want to smash a window. Yesterday, Facebook's head of security publicly opined that it was time for the platform to die, and just a day later, Mozilla's Mark Schmidt has joined in. In a tweet, Schmidt has announced that, as of the latest update, the Firefox browser will block Flash automatically. It looks as if the technology world has decided that if Adobe won't do the decent thing and kill it, then everyone else will just tool up and beat it to death themselves.

BIG NEWS!! All versions of Flash are blocked by default in Firefox as of now. https://t.co/4SjVoqKPrR #tech #infosecpic.twitter.com/VRws3L0CBW

— Mark Schmidt (@MarkSchmidty) July 14, 2015

It may have been the best way to deliver video in the early days of the internet, but the rise of standards compliant technologies make Flash look obsolete. More importantly, however, Flash is riddled with holes, and it's often used as a beachhead for hackers to get comfortable inside your computer. Oftentimes, this is met with silence from Adobe, a point that The Register put to the company's Wiebke Lips. Her response was that there are "extensive efforts" in progress at the company to make the code harder to crack, although they're not yet ready to be pushed out to users.

To be clear, Flash is only blocked until Adobe releases a version which isn't being actively exploited by publicly known vulnerabilities.

— Mark Schmidt (@MarkSchmidty) July 14, 2015

2015 is becoming the year that Flash gets killed-off once and for all, with Google tweaking Chrome to "intelligently" block auto-playing adverts. In addition, YouTube, the site that was probably the plugin's biggest proponent, switched to HTML 5 to deliver video at the start of the year. It's likely that other notable holdouts will be pressured, either by these latest moves, the most recent security controversies or the Occupy Flash movement. Yup, there's a whole movement dedicated to eradicating this stuff from the web.


Oh, and should you want or, more likely, need to use Flash, you can reactivate the feature at your liberty by dipping into Firefox's settings menu. 

Hide Comments