Apple blocks all outdated versions of Adobe Flash in Safari due to vulnerabilities


Due to a security flaw discovered in its Flash Player software, Adobe released an update to the web plugin earlier this week. Today Apple confirmed that it had updated its plugin blacklist for OS X to stop the system from using a version of Flash Player older than (or on older systems).

Here’s a link to the relevant Apple support page.

Has security ever been an issue with HTML5? Can HTML5 do much of what we depend on Flash for? Is Flash still necessary?

If you haven’t already, read this post about Chrome, Flash, and battery life.

  • Jake

    Re: is Flash still necessary? — yes, the audio/video landscape is still pretty much a mess, especially when it comes to live streaming as opposed to prerecorded content.

    • Greg

      Even with HTML5?

    • imthedude

      Apple seems to do live streaming with HTML 5 for a while now, without issue, for all their keynotes. It’s just laziness on the part of these companies; they have their crappy flash setup, and don’t want to change things even though flash is a detriment to the whole internet at this point, and doesn’t work on any mobile platforms at all.

      • nappertandy

        HTML5 support is not uniform across all browsers, and if you view comments on some live streams, you can usually see users complaining on the HTML5 stream not working well for their particular setup.

        Flash provides uniformity of experience across browsers without having to code to the nuances of every potential browser combination.

        Flash also still supports a number of features that aren’t supported universally by HTML5:

        None of this is to say that Flash doesn’t have problems (see Dave’s link above), but i’m not sure that HTML5 is fully there for all use cases yet. Especially if you need to support a wide range of browsers.

        • imthedude

          And it works on no mobile browsers. Mobile is the future, whether it requires more work on the web devs side or not.

          • Sigivald


            That and “uniform across all browsers” is overriden by “sucks on every platform every time”, and “huge security chest-wound”.

            I refuse to install Flash at all on most machines; if your site depends on it?

            I might run Chrome for it, if you’re very lucky – most likely you’re just not getting my traffic. Ever.

      • Jake

        It’s actually even worse for live streaming (I work for a live streaming company so this is an issue with which I’m fairly familiar). Currently there is no way to do adaptive bitrate live streaming without Flash. Cross-platform audio and video streaming is like a puzzle: you need different pieces for different platforms, and unfortunately for a lot of applications Flash is still one of the integral pieces.

        Re: Apple’s keynotes, they only stream their keynote to Safari (not Chrome / Firefox / IE / Android / etc) which makes the whoooole job a lot simpler.

        Believe me, I’m 100% on the HTML5 train, I would love to leave Flash in the dust and move to entirely native solutions. But the unfortunate reality is that we can’t just yet.

        • imthedude

          So you just ignore the mobile audience then? What’s your solution there?

          • Jake

            Degrades to HLS or RTMP if Flash isn’t available. The experience is worse, but at least it functions.

  • imthedude

    This piece of shit will never EVER die, and incompetent Adobe will never be able to fix it once and for all.

  • Terry Maraccini

    There is nothing that HTML5 video “can’t” do. But, there are problems that have yet to be overcome. Content delivery networks have been slow in their uptake of HTML5 video because adding pre-roll commercials is still in its infancy.Flash 5 CDNs typically include pre-roll and integration into their delivery mechanisms.

    Conversely, remember that Flash video delivery evolved as an includable object inside a flash file. Consequently, FLV files were a convenient way to deliver video over the web.

    I remember how Steve Jobs famously stated that h.264 was the future of media files on the web. Many scoffed at the time.

  • Stuzy

    Yes, yes it is necessary. Until the likes of the BBC stop using it for the iPlayer on the desktop. I will have to continue to use it.

  • RedInAustin

    any suggestions on getting past an “agree” button on the installer that is inactive (greyed out)?