Deploying Flash in 2015 (post Hacking Team)

"Click to run" is a browser setting, not a Flash setting. Ninite doesn't push out any specific settings for any of the programs they distro. Because Chrome uses IE's settings, you can manage them with GPO, but Firefox is independent and cannot be natively controlled by policy. You have to get a third party tool like PolicyPak to manage settings.

For the past two years I've been using Ninite to keep Flash up to date. Between cryptolocker variants and 0-day vulnerabilities I'm experimenting with removing Flash from everyone and then giving it back to the few that actually need it. I did this with Java and haven't looked back.Stats: 10.6% of sites still use Flash
Source: http://w3techs.com/technologies/details/cp-flash/all/allI've reached out to Ninite to see if they will automate the settings to click to run but I'm not expecting them to.For the users that I allow to have Flash how can I control the click to run settings via GPO?
http://www.howtogeek.com/188059/how-to-enable-click-to-play-plugins-in-every-web-browser/My users are primarily IE, Chrome is 2ndary and a very small subset use Firefox.
This topic first appeared in the Spiceworks Community

Similar Messages

Yet another Adobe Flash Player zero-day discovered from the Hacking Team breach.

Thanks for the heads up Symantec Matt.

Aaaahhhh yes... remember when an entire day could by without news of a breach or hack or targeted attack? Yeah... neither do I.It will probably shock you all to hear that the Symantec Security Response team dropped a new blog over the weekend outlining a Zero-Day vulnerability in Adobe Flash player. Dig it:Second PoC Exploit for Adobe Flash Player Discovered After the Hackers-for-Hire Company Breach
Yet another Adobe Flash Player zero-day discovered from the Hacking Team breach.Symantec is aware of a second vulnerability (CVE-2015-5122) in Adobe Flash Player that’s associated withHacking Team, the Italian company which recently suffered a major data breach. The existence of the unpatched vulnerability has been confirmed by Adobein itssecurity bulletin.Symantec’s analysis has confirmed that the vulnerability can be successfully exploited...
This topic first appeared in the Spiceworks Community

Interview with David Vincenzetti, CEO of Hacking Team

Interview with Business InsiderNot as much in depth as I'd hoped it would be, but worth a look. I like how he skirts the question on if they disclose zero-day info to the vendors. "BI: As I understand it, finding hackable software flawsis core to your business, do you ever disclose any of the security vulnerabilities you find to vendors?DV: Zero day vulnerabilities are not core to Hacking Team’s business. The core is providing a system to law enforcement that allows surveillance in the digital space.Essential to that is a process of continuous updates to the software to assure that it can be operated securely. Zero day exploits are only one way in which clients may choose to deploy Hacking Team software."
This topic first appeared in the Spiceworks Community

SEOUL: Samsung Electronics is bringing forward the launch of a key premium smartphone model, a person familiar with the matter told Reuters, as the South Korean tech giant seeks to revive sales after a sluggish second quarter.The world's top smartphone maker will launch a new version of its Galaxy Note phablet in mid-August, the person said, declining to be identified due to the sensitivity of the matter. Previous versions, such as the Note 3 and 4, typically launched in September.A Samsung spokeswoman declined to comment.The mid-August launch will likely put the new Note smartphone model on the market ahead of arch-rival Apple's next iPhones. The US company is preparing for its largest initial production run for new phones so far by the end of the year, the Wall Street Journal reported earlier this week...Read More
Read More

When are Adobe going to make it easier to deploy flash player to the enterprise????

I've been deploying flash player for well over 5 years now and in that time the deployment has only got very marginally better.
Why do they continue to allow installs just to fail when the control is in use??? I've written vbscripts to kill the handle to the ocx activex file, rename the ocx to .old which allows the installax.exe install utility to complete without errors. When Internet explorer next relaunches it uses the new control and the old one can be deleted. Why can't they incorporate this kind of logic into their installs?
Why do Adobe insist on using rubbish exe routines inside msi's that are perfectly capable of installing applications and don't just bomb out at the first sign of a difficulty? Using custom installer routines inside msi's makes it very difficult for people who have more than adequate repackaging and software deployment experience to be able to customise and get around the difficulties that Adobe forces upon us.
When are Adobe going to realise that the way they are releasing updates for flash player is costing companies a lot of money in company's helpdesk and systems team's time spent supporting and troubleshooting their buggy installs? At best I've only experienced a 95% success rate with flash player deployments. Some people might say "what am I complaining about?" and "that's to be expected". This has only been the case with weeks of work to fix the flaws in the flash player install routines. However 5% failure on 4000 machines is 200 possible help desk calls and 200 people not able to use various applications, view web content etc. Before we invested the time in scripting to get around the installer flaws the success rate was closer to 75%, that's 1000 out of 4000 that were failing. Does anyone think that's acceptable considering how widely it's used?
What has Adobe got planned for enabling large businesses to manage the deployment of flash player better? They've done it with other products why can't they do it with flash player?
For software deployment teams this is a constant and ever present headache.
Any Adobe representative want to comment???

It's ridiculous cause most website use Flash Player and none of them work on my LG 650v Smart TV.
Are discussions being held between Adobe and LG? If yes, are they close to a solution? If no, what seems to be the issue?

What is the best way to deploy Flash in the Enterprise?

We would like to deploy Flash Player in our corporate environment.
Users are NOT administrators of their local machines, so just installing it on the image and leaving it is not an option.
Telling users not to click the large Adobe Flash Player has an update splash screen is also not an option.
1) How do you install Flash Player in an Enterprise environment?
Please include answer with a guided installation document, as the SCUP document is not end-to-end.
2) How do you disable Flash Player update notifications?
Please advise,
Andy

Hi,
Thanks for this, but I am looking for a enterprise class solution: i.e. installing hundres of machines with automation and reporting. We are already aware of the MSI, but the automatic installation recently started failing since we migrated to Windows 7 and users are non-admins. We also plan on keeping UAC turned on, so running the MSI with the SYSTEM account in a script fails.
Again, we are looking for an end-to-end solution, possibly using SCCM and SCUP. In essence, documentation and web chatter points to being able to:
1) automatically have SCUP poll Adobe.com for updates
2) automatically have SCUP publish it to SCCM when available
3) push it out to WSUS as an update
4) clients automatically update it as part of Windows Update.
I have the bits and pieces, but have failed putting it all together.
I know I am not the only person administrating a large company and uses Flash.... help!

[svn] 3882: Target Flash player 10 for the team application.

Revision: 3882
Author: [email protected]
Date: 2008-10-24 13:16:42 -0700 (Fri, 24 Oct 2008)
Log Message:
Target Flash player 10 for the team application.
QA: No
Doc:No
Check-in tests: pass
Modified Paths:
blazeds/trunk/apps/team/WEB-INF/flex/flex-config.xml

By "running fine", flashplayer 10.1 32-bit linux library may require some "massaging" to actually get it working.
E.G. on Debian Lenny 64-bit using 32-bit firefox 3.6.8 it requires at least these Lenny 32-bit emulation packages:
    ia32-libs
    ia32-libs-gtk
(this has been pretty well established for a while)
*Plus* you'lll have to grab the following libraries from a 32-bit Lenny system:
:/usr/local/firefox-3.6.8_i386$ ls -l *curl* *idn*
lrwxrwxrwx 1 root root     19 2010-06-24 14:57 libcurl-gnutls.so.3 -> libcurl-gnutls.so.4
lrwxrwxrwx 1 root root     23 2010-06-24 14:57 libcurl-gnutls.so.4 -> libcurl-gnutls.so.4.1.0
-rw-r--r-- 1 root root 233992 2009-08-17 19:41 libcurl-gnutls.so.4.1.0
lrwxrwxrwx 1 root root     12 2010-06-07 10:22 libcurl.so.3 -> libcurl.so.4
lrwxrwxrwx 1 root root     16 2010-06-07 10:22 libcurl.so.4 -> libcurl.so.4.1.0
-rw-r--r-- 1 root root 271524 2010-03-26 23:27 libcurl.so.4.1.0
-rw-r--r-- 1 root root    801 2008-06-06 21:29 libidn.la
lrwxrwxrwx 1 root root     17 2010-02-26 07:01 libidn.so.11 -> libidn.so.11.5.37
-rw-r--r-- 1 root root 200280 2008-06-06 21:29 libidn.so.11.5.37
and plop them in the top level firefox install directory to get it working. Otherwise you only see messages like
    "Adobe Flash Player error: could not load cURL library"
(Not terribly helpful)
This is in contrast to the 10.0 beta 64-bit flashplayer lib that worked fabulously (i had no issues with it ever, which can't be said of the 32-bit one).
I wonder just how difficult it would have been to fix it for the latest exploits, as they'd done for the 10.x beta 64-bit linux flashplayer previously for security issues?
This failure by the industry to fully support 64-bit applications is getting pretty pathetic by this point.
--stephen

Hacking Team 0-Day Shows Widespread Dangers Of All Offense, No Defense

"The Hacking Team is composed of hackers and security engineers working for the government. They have access to highly confidential data and they likely have a target on their back," says Darren Guccione, CEO of Keeper Security."Despite whether these passwords were currently in-use or the cause of the breach, reusing the same passwords or using weak passwords is a serious cause for concern for a team of government security experts and hackers."http://www.darkreading.com/attacks-breaches/hacking-team-zero-day-shows-wide-spread-dangers-of-all-o...
This topic first appeared in the Spiceworks Community

Hi Stephanie
Well the engineers came and checked the line and could not see any issue with it.
The replacement hub that I had used to narrow down the issue was then rebooted and wouldn't sync so they tried their test hub and that worked. I was asked to put my origonal hub back on, the one I had removed some weeks ago as part of trying to diagnose this fault, and that worked so before leaving I was told that they would:
- Send out a replacement hub just in case.
- Recommend a lift a shift or rebuild of software to Wholesale. Though they did state that Wholesale might not do this as they could find no fault.
About an hour later the hub rebooted and I had 5.2Mb sync rate, 4.5Mb throughput and a SN margin of 18/6. This is as fast as it as the line has ever been. I'm not sure what was done at the exchange as I didn't get an update.
Sadly later that night whilst wtching something on Vision the video stream stalled and I got the same issues again in that the SN margin went down to this time 18/4.0 with lots of errors/loss of input/signal. This morning the sync speed is down to about 4.2Mb and throughput 1.94Mb and the SN margin is 18/9.
So no further forward really.
So either I've got 2 faulty hubs..unlikely though I suppose possible
The DSLAM was not lift and shifted or the software rebuilt as no fault could be found.
If the lift and shift or rebuild hasn't been done then can this be progressed?
The only other thing is that my line is permanently in fast mode due to previous attempts by BT to resolve isssue with my Vision service when it was in Interleave mode. I suppose this could also be contributing to the issues?
I really do need this sorting and as I say I have another ADSL service in to the house and that is rock solid and sync's at over 5-6Mb.

Deploying Flash Player 11.5.502.149 errors ...

Hello everyone. We are trying to deploy Flash Player 11.5.502.149 and are receiving 2 error messages and are not able to figure out why this is happening. Any assistance would be greatly appreciated:
Error 2753.The File 'InstallAX.exe' is not marked for installation.
Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action NewCustomAction1, location: C:\Windows\TEMP\InstallAX_11_5_502_149.exe, command: -install -msi
Thank you in advance!
Mike

Anybody? Bueller? Help!

Deploying Flash player with Active Directory Group Policy

I manage hundreds of computers at several different locations
and have the nightmare of updating Flash Player everytime a new
version comes out. The file I download from Adobe's site is an .exe
and does not contain a .msi file for Active directpry deployment.
How can I use group policy in Active Directory to deploy this
software to all my computers without me having to individually
touch each machine?

quote:
Originally posted by:
ocpltech
I manage hundreds of computers at several different locations
and have the nightmare of updating Flash Player everytime a new
version comes out. The file I download from Adobe's site is an .exe
and does not contain a .msi file for Active directpry deployment.
How can I use group policy in Active Directory to deploy this
software to all my computers without me having to individually
touch each machine?
so did any one ever send you an email or pm on the solution?
I was searching the web for this exact topic and so far only found
your question.
12 days later - you'd think someone here would have typed up
a solution........
H

Can't get simple Flash document to post to web site.

I have created a simple page in Flash CS4 for my class and for some reason when I go to publish the page online all I get is an empty page colored blue (background) but neither the title or any of the graphics or images on the page show up, it is kjust a blank blue page on the web browser. I really need an explanation for this so that I do not fail the project. Please help!!
This is the link to the page I am getting and if you can please view the source code and tell me what in the world is wrong:
http://zlloyd1.com/MachoaNorfolkHistory.html I know it is something to do with the paths to the image files but they are all present in my online images folder and I do not know how to modify the HTML file created when you publish a Flash document. I do have some experience with HTML coding but this is not something I recognize. I will await your reply!!
Lost,
Zachariah A Lloyd

Dear Adobe Support,
I am not entirely sure how to add attachments to a forum post. Could you please explain this to me and I will be more than happy to attach the swf file?? I will await your reply and thanks again!!
Zack Lloyd

Multiple Forms in a Flash Document and Posting Using ASP

Hello everyone!
I have some what of a dilemma on my hands. I am creating
multiple forms in one document using Flash and need them to post
using ASP script. I have been researching this for the last six
days, and I have had NO luck. I have noticed that all the
information that I have found is for one form, not more than one.
What I have so far is the Flash document, with 4 forms. The
basic idea is that a user chooses from a drop down menu (the
combobox) a location, and depending on the location chosen, it
takes the user to another frame in the flash document. The forms
(all their own movie clip) contains a name field, a department
field, and either a manager name a userID field or an employee
number as well as the basic buttons for submitting the form or
resetting the form.
So far what I have working is the drop down menu (combobox)
taking me to the proper frame and it shows the appropriate form.
The reset button clearing the form (deleting any information that I
have imputed into the input fields), but I have absolutely NO idea
how to get the submit button to work (I did manage to get it to
send me a message if there was nothing in one of the input fields),
and NO idea how to get the information to the ASP file.
Where there are 4 forms do each of them have to have their
own ASP file attached to them, or can I use one?
If anyone knows a site that deals with multiple forms in one
SWF and posts using ASP that would be greatly appreciated, or if
you know some actionscript that could be helpful.
Thank you all in advance.

That would be part of my problem, I really don't know ASP,
and I am flying by the seat of my pants.
The current script I have for the ASP file is:
<% @Language = "VBScript" %>
<%
Option explicit
Dim strfullName
Dim strdeptName
Dim strmanagerName
Dim strobjeemail
Dim strlocation
strfullName.Request.Form("fullName_txt")
strdeptName.Request.Form("deptName_txt")
strmanagerName.Request.Form("managerName_txt")
strlocation.Request.Form("locationName")
Set strobjemail = CreateObject("CDO.Message")
strobjemail.From = "[email protected]"
strobjemail.To = "[email protected]"
strobjemail.Subject = "Program from " + strlocation
strobjemail.Body = "This user has completed this progrmam
from " + strlocation & Chr(13) & Chr(10) & "Name: " +
strfullName & Chr(13) & Chr(10) & "Department: " +
strdeptName & Chr(13) & Chr(10) & + "Manager: " +
strmanagerName
strobjemail.Send
Set strobjemail=nothing
%>
The AS code that I have so far is:
function formValidationChecks(){
if (fullName_txt.length==0){
status_txt.text = "Please enter your Name";
else if (deptName_txt.length==0){
status_txt.text = "Please enter your Department";
else if (managerName_txt.length==0){
status_txt.text = "Please enter your Manager";
else {
status_txt.text = "Thank You!";
variables.fullName_txt = fullName_txt.text;
variables.deptName_txt = deptName_txt.text;
variables.managerName_txt = managerName_txt.text;
varLoader.load(varSend);
trace("-----");
trace("Name: "+fullName_txt.text);
trace("Department: "+deptName_txt.text);
trace("Manager: "+managerName_txt.text);
trace("Form validated");
submit_btn.onRelease = function(){
status_txt.text = "";
if(formValidationChecks()){
var lv = new LoadVars();
lv.fullName_txt = form.fullName_txt.text;
lv.deptName_txt = form.deptName_txt.text;
lv.managerName_txt = form.managerName_txt.text;
lv.sendAndLoad("mail.asp", lv, "POST");
reset_btn.onRelease = function()
fullName_txt.text = "";
deptName_txt.text = "";
managerName_txt.text = "";
So far my reset button clears everything, and the submit
button is tracing the content in the form fields, but it's not even
grabbing the asp page.
Any suggestions? Even pages that have tutorials that are in
the form of a video.
Thanks

Help deploy flash builder 4.5 project

I need help.
I am trying to deploy my first Flash Builder 4.5 project using the Zend framework. My application runs fine on my localhost (on my home computer). I am having trouble deploying it to my remote server.
The error I receive is ‘Send failed Channel.Connect.Failed error NetConnection.Call.BadVersion: : url:’…’
In the instructions it says that I need to modify the amf-config.ini file as follows:
    Uncomment zend_path and enter the absolute path for zend_path
    Set amf.production to true
    And update webroot with absolute path to the root on the server
Here is the contents of my amf_config.ini file:
[zend]
;set the absolute location path of webroot directory, example:
;Windows: C:\apache\www
;MAC/UNIX: /user/apache/www
webroot =/home4/hiddenp6/public_html/HPD/
;set the absolute location path of zend installation directory, example:
;Windows: C:\apache\PHPFrameworks\ZendFramework\library
;MAC/UNIX: /user/apache/PHPFrameworks/ZendFramework/library
zend_path =/home4/hiddenp6/public_html/HPD/ZendFramework/
[zendamf]
amf.production = true
amf.directories[]=HiddenPointeAdmin-debug/services
Thanks for any help you can offer...

You can disable the asdoc hover by toggling Preferences -> Flash Builder -> Editors -> ActionScript Code -> Show in text hovers.
-Anirudh

Creating a Simple Flash Movie With Poster Frame and Play/Pause Buttons

Hi, It's been over a year since I played with Flash last, and
I have completely forgotten everything I learned.
I have a .flv file which I want to play on my website. It
should display a poster frame when the page load, and not autoplay
the movie. It should have the play button I made in photoshop
sitting on top of the poster frame. When pressed, the movie should
start playing and the button should be shifted for the pause button
I made in PS (it should work just like the play/pause button in
iTunes). When the movie has finished playing, it should jump back
to the poster frame.
I have tried using the flvplayback component and also played
around with just embedding the flv directly and inserting a play
and pause button from the common library, but I can't seem to get
it to work. With the flvplayback component I have managed most of
it apart from using my own buttons and getting the poster frame to
work (which apparently has to be done with Action script).
Any help appreciated.

Which version of Flash/actionscript are you using? Since you
are just starting out, you should read one of Adobe's tutorials on
the matter. Either use Flash Help to find examples on how to use
Flash or go to their website. Here is a great tutorial for someone
just starting out. Make sure you read all three tutorials in "Using
Flash for the first time".
http://www.adobe.com/devnet/flash/getting_started.html

Deployment Failing when "Update post application" is enabled

Hello! I keep receiving this error during imaging when I have the option enable to do windows updates post applications installed. This has always worked in the past but now it has stopped working. Any thoughts??

Hello! I keep receiving this error during imaging when I have the option enable to do windows updates post applications installed. This has always worked in the past but now it has stopped working. Any thoughts??
What do you have in your LocalGPOPAck? And do you have logs uploaded somewhere? Are you deploying Win 7/8.1?
If this post is helpful please click "Mark for answer", thanks! Kind regards

Deploying Flash Player to User environment

Hi All,
I've been running into some serious issues with our environment, it seems we have a lot of different versions of Flash Player floating on everyones machine at the moment - I'd like to change this as easily and quick as possible.
I was writing a script that used the Universal uninstaller to remove all versions of Flash Player then it would install the latest. However after it runs it will only partially uninstall the older versions of Flash Player, it sometimes will uninstall the whole thing and Install the latest perfectly. I noticed this only happens on the real older versions of Flash (11.2 - 11.6). After it uninstalls it partially I try to run the (.msi) installer manually and I get an error code 1722 ("There is a problem with this Windows Installer Package. A program run as part of the setup did not finish as Expected") - where after i must run the msfixit tool(http://support.microsoft.com/mats/program_install_and_uninstall/) to fully remove the program.
The script goal:
Remove all versions of Flash Player using the Universal Uninstaller
Deletes the folders as specified:
          C:\Windows\SysWOW64\Macromed\Flash
          %appdata%\Adobe\Flash Player
          %appdata%\Macromedia\Flash Player
Installs latest version 11.9 ActiveX and Plugin
User Environment:
Mainly Windows 7 SP1 Enterprise x64
Currently mixed environment on old versions (11.2 - 11.6)
Non-admin users
Deployment plan as of now is Group Policy - later ideally SCUP once SCCM 2012 is setup.
Also seeking advise to stabalize environment for future deployments, ie: should i disable automatic update and deploy updates accordingly or is there a way to allow the users to get the latest versions of flash.
Thanks all!

Hopefully you can find most of the information you need in http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html

Deploying Flash in 2015 (post Hacking Team)

Similar Messages

Maybe you are looking for