Screw you, Adobe. In the Ear.

[triadruid]

Day Zero Flash/Adobe Reader exploit - note that it requires no direct action by the user, just visiting a malicious site (up to and including those ubiquitous Flash ads).

According to solarbird, who I got this from, all O/S's are susceptible until this is fixed. What your computer will allow the vulnerability to execute will vary, of course, but this affects Macs and Linux as well as Windows.

Comments

[ruisseau.livejournal.com]

The pope just had me install this: https://addons.mozilla.org/en-US/firefox/addon/433

Says it stops flash from running.

[triadruid.livejournal.com]

Probably a little less drastic, thanks.

[featherynscale.livejournal.com]

My, what a helpful add-on that is. There is 75% less flashing screaming lime green in my world now.

[ruisseau.livejournal.com]

Between it and Ad-Block Plus, my web browsing experience is 200% better!

[crookedface.livejournal.com]

There's something to be said for my reluctance to jump on all the new tech as it becomes available. I figure it's going to take a while to find all the bugs and fix them, so I tend to wait a while to upgrade anything.

Checked the Adobe Reader I have--Reader 8. I didn't think I'd ever seen any Flash run when a website fired up Reader. I use Preview by choice, so I think it's time to remove Adobe Reader from my 'puter entirely.

Checked my Safari settings, too. Had most of them already set as recommended.

Finally turned FileVault on. I've been avoiding it as I've no idea if it will affect the speed at which my machine processes files. I'll find out now, eh?

[liquidfun.livejournal.com]

Whew, that's a relief. There are very few vulnerabilities that are Mac AND Linux compatible. It's really nice the creators of software are putting compatible vulnerabilities in these days. :-)

[theslice.livejournal.com]

I go with NoScript and AdBlock Plus as Firefox addins.

[rfunk.livejournal.com]

What if I don't install acroread, and use the various non-Adobe Linux/Mac programs that understand PDF?

[triadruid.livejournal.com]

That seems fine from what I'm reading, as long as you don't have Flash installed.