What are these Security issues in Flash?

Hey Guys,
I recently just got an interesting meeting request from my higher ups. They want to discuss secuirty threats with Adobe's Flash player and solutions. Thses solutions include taking down a site I put together for them over the course of several months. I am not about to see my site get taken down without a fight so I am looking for a summary of what possible threats can come out of the latest version of Flash, how they can infect a user, and how I can stop it.
I would really hate to see my site get taken down. Don't have too much time before the meeting so please let me know what I can do.

Hi Marks,
An update has been posed today for all systems, http://http://www.adobe.com/support/security/advisories/apsa09-03.html this will explain the vulnerably that has been doing the rounds for the last few weeks. they have issued a fix in a new download with the new verson number is
10.0.32.18
Cheers

Similar Messages

What are these blue box question marks?

What are these blue box question marks appearing on some websites?
They seem to not appear on every website I visit, only some.
I have tried several troubleshooting steps.
-I reset cache.
-I changed text encoding.
-I checked bos to always display images.
-I went to "develop" and opened in every other browser.
-I updated my adobe flash player.
What else can I do?
It is so annoying!
I am running Safari 8.0.
Thank you!

Here is a screenshot of the page:

In pricingcondition table KOMG - what are these fields?

Hi Gurus
Please let me know what are these fields in KOMG and KOMP condition tables.
RKE_MVGR1
RKE_MVGR2
RKE_MVGR3
RKE_MVGR4
RKE_MVGR5
Thanks
Kris

Hi Sai
Yea I am sorry , I know these are Material group fileds, But what is RKE ? in front of the field?
Like that there are so meny fields in the table KOMG(pricing condition table) , So I am not able to use these fields while creating condition table?
How to solve this issue?
RKE_PAPH4
RKE_MVGR1
RKE_MVGR2
RKE_MVGR3
RKE_MVGR4
Thanks
Kris

What are .heu files in the flash player cache folder for?

what are .heu files in the flash player cache folder for?

On Friday 07 Nov 2008, alex_stewart wrote:
> What could be the issue that server 2 is not able to write .swz files
> I have the .swz MIME types on both the servers
If the files are already there, they'll never be overwritten when you visit a
new site, would they ? That's how the cache works :-)
Tom Chiverton
Helping to simultaneously benchmark sticky fourth-generation CEOs
This email is sent for and on behalf of Halliwells LLP.
Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at Halliwells LLP, 3 Hardman Square, Spinningfields, Manchester, M3 3EB. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by The Solicitors Regulation Authority.
CONFIDENTIALITY
This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 2500.
For more information about Halliwells LLP visit www.halliwells.com.

Would downloading the YouTube app open me up to the security issues of Flash?

I don't use Flash or Java because of security concerns. As a result, there are many YouTube videos that I cannot watch (which I can live with).
There is an app for from the App Store for YouTube. Would downloading the YouTube app open me up to the security issues of Flash?

No, The You Tube App does not run flash in any way, and as Flash cannot run on an iPad there's no way to be susceptible to its security issues. Even the Browser Apps that support flash encoded Videos, do not run flash, they decode the video at a servers of the App makers and then stream the video in a compatible format to the App.

What are these processes and how do I prevent them?

For many years, many have complained of external drives that are in standby/sleep spinning up for no apparent reason. From the user's point of view this is unnecesssary, but to make matters worse, the system usually stops everything else while waiting for the drives.
I have a Mac mini that I use as a home theater pc. The media and backups are on a 5-bay enclosure (no RAID) attached by USB. While watching a video, the unused drives will go into standby mode, which is good. But then, with no user activity, they will spin up, freezing the video and everything else, which is not good. As these are slow drives and spin up sequentially, this can take 10-20 seconds. This may happen once or twice an hour, but sometimes more frequently.
In looking into the causes, I have turned off time Machine (after putting these drives into the Privacy section for good measure). I also prevented Spotlight and fsevents logging with the following:
mdutil -i off /Volumes/<drive1> /Volumes/<drive2> . . .
cd /Volumes/<drive1 and then repeat for other drives>
 rm -rf .fseventsd .Spotlight-*
 mkdir .fseventsd
 touch .fseventsd/no_log .metadata_never_index
As far as I can tell this has worked to stop those processes from accessing the drives after they are mounted, but the problem persists. To find out what else might be causing them to wake up:
sudo fs_usage -w | grep -e Volumes/<drive1> -e /Volumes/<drive2> . . .
and here is what I found last night (actually didn't use the -w last night, thus it is cut off):
18:35:36 fsgetpath /Volumes/XBMC 0.000026 SSDragHelper
18:35:36 fsgetpath /Volumes/Stuff 0.000006 SSDragHelper
18:35:36 fsgetpath /Volumes/DatOptic_3 0.000005 SSDragHelper
18:35:36 fsgetpath /Volumes/MacBackUp 0.000003 SSDragHelper
18:36:15 fsgetpath /Volumes/XBMC 0.000026 System Prefe
18:36:15 fsgetpath /Volumes/Stuff 0.000004 System Prefe
18:36:15 fsgetpath /Volumes/DatOptic_3 0.000003 System Prefe
18:36:15 fsgetpath /Volumes/MacBackUp 0.000003 System Prefe
18:55:36 fsgetpath /Volumes/XBMC 0.000034 GoogleSoftwa
18:55:36 fsgetpath /Volumes/Stuff 0.000004 GoogleSoftwa
18:55:36 fsgetpath /Volumes/DatOptic_3 0.000003 GoogleSoftwa
18:55:36 fsgetpath /Volumes/MacBackUp 0.000003 GoogleSoftwa
After looking into the Google process, I was surprised to find the tentacles that Google puts into your system, and ripped every bit of it out that I could. But I have no idea about what's going on with SSDragHelper and System Prefe (presumable System Preferences). This must be OS X itself? What are these processes doing, and is there any way to prevent them from accessing these disks in this way?

Thanks for the reply Hen3ry. Looks like you've done a lot of investigation. For me, fs_usage entries accompanying spindown are not problems - I'm happy if the drives spin down. My problem is the spinups. But still, I don't think it is necessary to time the fs_usage entries with spinups. If you grep for the drives you're concerned about, you will see any process that would potentially wake them up.
Because my understanding is limited, I also am more concerned with the process/application that is accessing the drives than with the functions or commands they are sending. And the values that are returned by those functions are way beyond what I can deal with.
It's interesting that you've found a difference between your old and new drives. Could you specify the enclosure and drives in each case?
The StorageStatus app looks interesting; thanks for the tip.
Here's a summary of what I've done so far, which I think is working. I need a few more weeks to know for sure.
How to prevent unwanted drive spin-ups
If you are actively using the computer that the enclosure is attached to, nothing on God’s green earth will stop OS X from waking them up after some user action, even ones that seem to have nothing to do with the external drives. But if you leave the computer alone while some application is running, like watching a movie or downloading a file, you have a fighting chance of coaxing OS X into leaving the uninvolved drives alone.
If the drives are shared with any other computers over a network, eject them on those computers
Otherwise, OS X (AppleFileServer) will poll them every 10 seconds. This might not be bad if you want to just keep the drives spinning and the other computer stays awake.
Third-party apps
Make sure no apps are running that might access your drives. Google runs some processes that do this (maybe I’m naïve, but I was so shocked I removed chrome and every other trace of Google from my Mac mini system). Another is iStat and any utility that monitors SMART status in the background.
Don’t let Spotlight index or search the drives
Spotlight is persistent, and it may be necessary to take a variety of steps to stop its various processes (mds, mdworker) from accessing the drives and waking them up. In other words, kill it, drive a stake through its heart, then burn the body:
In System Preferences > Spotlight, add the drives to the Privacy pane.
Add a file called .metadata_never_index to the root of each drive (note the leading period). The easiest way to do this is in Terminal
touch /Volumes/<drive1>/.metadata_never_index
Tell Spotlight AGAIN to keep away from the drive:
mdutil -i off /Volumes/<drive1> /Volumes/<drive2> . . .
Finally delete the Spotlight folder from the drive.
rm -rf /Volumes/<drive1>.Spotlight-*
Stop fseventsd from logging in the drive
This is easy, just putting a no_log file in its folder. I have found that rarely it still writes some files in there, but it doesn’t seem to do so when it causes problems, so . . .
 rm –rf /Volumes/<drive1>/.fseventsd/*
 touch /Volumes/<drive1>/.fseventsd/no_log
Finder sidebar
Some people say that if the drives show in the Sidebar of Finder windows, the Finder will be checking them. I’m not sure. But to be safe, in Finder Preferences > Sidebar, uncheck External Disks.
Just say no to Time Machine
On the home theater mac itself, regular backups shouldn’t be needed. You should be able to just turn Time Machine off. However, it is probably sufficient to simply open System Preferences > Time Machine > Options and add the drives to the list of locations to exclude from backup.
Second, local backups can be disabled with
sudo tmutil disablelocal
Look for other culprits
If the problem persists, use fs_usage, which generates a real-time log of filesystem activity. There is so much going on that you need to use grep to restrict the output to entries that involve your drives. The entries that accompany your drive spin-ups are the ones you really want.
sudo fs_usage -w | grep -e Volumes/<drive1> -e /Volumes/<drive2> . . .
Now leave the keyboard and mouse alone, as many things you might do will cause the drives to be accessed. You probably want to find what does it when you’re not actively interacting with the computer. It’s not really necessary to wait for your drives to sleep and see what wakes them. Any activity you see would probably wake the drives if they were asleep. When you see some activity and want to stop and examine, type Control-C to stop the output. On the far right of each entry is the process or application that accessed the disks.
I got pointers from http://system-log.tyr.org.uk/2012/01/31/how-to-stop-usb-drives-from-spinning-up- unnecessarily-on-os-x-lion/ and http://www.jackenhack.com/disk-that-refuses-to-sleep-in-mac-os-x-how-to-fix-it/

What are the security settings to lock down a form with fillable fields and yet allow someone with Reader to fill in the fields as will as save the form and print it?

What are the security settings to lock down a form with fillable fields and yet allow someone with Reader to fill in the fields as will as save the form and print it?

You want to allow someone to open your document and fill out the form (in the fields you have created), but not change or edit the form, right? Here's the answer - assuming you are using Acrobat Pro and someone will be opening the PDF using at least Acrobat Reader 9 and up:
Tools > Protection > Encrypt < Encrypt with Password
Answer YES to change the security.
A new window opens:
 Do NOT select Document Open (or that will require a password to open the document.)
 Select: Permissions (Check the box next to "Restrict editing and printing of the document.")
 Change the following 2 settings from the drop-down box:
 Printing Allowed: Select High Resolution
 Changes Allowed: Select Commenting, filling in form fields, and signing signature fields
 Leave selected: "Enable text access for screen reader devices for the visually impaired"
 Change Permissions Password (insert a strong password)
 Leave all other settings alone in "Options"
 OK - OK
 Re-enter the Permissions Password (the one you entered above)
 OK - OK
 Save the PDF to apply the security [notice that (SECURED0 will appear after the document title]

What are the major issues to consider in code review? Or performance analys

What are the major issues to consider in code review? Or performance analysis?

I would not recommend you to try to optimize performance by checking the coding.
There is the code inspector which can do all which makes sense automatically.
The above mentioned points are not the real issues.
Instead of code review you should execute test cases and measure the exection time.
1. With STAD if you want to get good time measurement
2. With SE30 and ST05, if you want to have data for further anaylsis.
Check total time (SE30), check whether DB part is large, then go to SQL trace. Do the check mentioned here
/people/siegfried.boes/blog/2007/09/05/the-sql-trace-st05-150-quick-and-easy
to find the SQL bottlenecks.
The major point about SQL problems is index support, if there is no proper index support then the performance will be poor. Be aware, that problems are only visible, if you tables are filled.
In a test system where you have very little data, you will never encounter performance problems.
Check also the Top10 of the SQ30 hit list.
Be aware that a proper performance analysis is not a 5 minutes job.
Siegfried

Dear All,what are the major issues in implementation in sap hcm

what are the major issues in implementation in SAP HCM project scope is PA ,OM,TIME, INDIA PAYROLL

Hi Ramjan,
Try to have a clear understanding of requirements and find the best solution in SAP. Keep as much as possible everything standard and based on SAP best practices.
In PA look for a comprehensive enterprise structure. It's base for everything.
DON"T do anything through development(ABAP code) as much as possible specially in PT and PY. Try to do claculation by PCRs and Schema.
Regards,
Omid

What are the major issues in implementation SAP CRM sales and CIC.

Hi
We are newly implanting the project to the mobile Manfaturing Company. Our Clint is going for are looking to implement the CIC interaction center win Clint and the Sales modules of CRM .
We have some 3rd parry raw data with us with that raw data we are calling to the customers and we want create the opportunity in the CIC after that we will convert the opportunity as a sales with our other sales people. After that they will sale that product to that customers.
We have the back end of the R/3 SD, MM modules implemented for Clint.
Now 1) I want to know after implementation what are the major issues will come in the project normally for the conman Sales and CIC Win Clint projects kindly give the some issues normally come and solutions for the problems also.
My motto is that if I know the issues I can make preparation for that conman issues and I will make my project with good effective and smooth running ..
with Regards,
prakesh
Edited by: prakesh on Dec 9, 2009 6:04 AM

hi prakesh,
firstly, cic winclient is an older version and obsolete so its better to implement the new crm version.
secondly, in any case if you want to implement, then your 3rd party raw data has to be mapped with the SAP system which could be a problem. Middleware could be a lot of effort. Rest all depends on how much customization you need for your business requirement in cic and sales. In case you are implementing standard functionality mostly then no major complications are expected otherwise lot of development effort may be required.
regards
shikha

What are these weird blue dashes?

What are these weird blue dashes that got inserted into my Pages document since I closed it? They appear with each new paragraph start or break and I can't see how to get rid of them! ( I have OS 10.6.8 and Pages 4.1)

Probably you used tabs to indent your paragraphs instead of using First Line Indent and you have Show Invisibles turned on:
Menu > View > Hide Invisibles
Peter

My company loaded profiles onto my iPad for email and calendars.. There is also a signing certificate and a certificate. What are these for? Additionally are they able to monitor apps and usage, ie Internet usage when it is not on their wifi?

My company loaded profiles onto my iPad for email and calendars.. There is also a signing certificate and a certificate. What are these for?
Additionally are they able to monitor apps and usage, ie Internet usage when it is not on their wifi?
I do not have any VPN enabled?

Do you happen to have an Android? If so and depending on what version there is a great data usage analyse tool built-in. See if you can go to Settings -> Data Usage from there you can pick a current or previous billing cycle and then use the vertical sliders to select a date range and it will filter the usage data per app to show you exactly what app(s) were using data during that time frame.

What are the security implications of having JAVA running on my Mac Book Pro?

What are the security implications of having JAVA running on my Mac Book Pro?

Java on the Web (not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.
Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.
Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it — not JavaScript — in your browsers.
Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a lock icon in the address bar with the abbreviation "https" when visiting a secure site.

What are these called?

Hi,
I am trying to figure out what this element is? Since I dont know what its actually called I have to provide a picture for my example.
What are these elements called? I have pointed to them in my image with the red arrows. Im pretty sure the horizontal ones are a "horizontal rule". But what about the vertical ones? And how does one implement them in a site? http://i52.photobucket.com/albums/g29/FartyMcFly/Example.jpg
Thanks for any answers in advance and I apologize if its something stupidly simple.
Thanks

How do I set the length of the border lines.
I'm afraid there is no support for that in current CSS2 standards.
You will be able to do it with CSS3 border-images. But not for a few more years.
http://www.css3.info/preview/border-image/
In the meantime, you could put your border on a neighboring division -- see example below:
http://alt-web.com/TEMPLATES/CSS-Basic-2-column-layout.shtml
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
http://alt-web.com/
http://twitter.com/altweb

What are the security risks for opening port 80 on workstations?

Hello all,
in our environment, there is an application which open port 80 on workstations when installed, but it is not allowed on preimeter FW
could you please advise what are the security risks for leaving port 80 opened on the workstations? or it is considered secure unless it is not allowed on the preimeter FW?
thanks alot & regards

Hi R.Naguib.
The 80 port is open by default through the firewall on Windows system, it is used by a http protocol by a browser.
As for the network or hardware Firewall settings, I suggest to turn to the network administrator for details.
Regards
Wade Liu
TechNet Community Support

What are these Security issues in Flash?

Similar Messages

Maybe you are looking for