Markus Gothe wrote:
Basically I think it more secure because the end-user has the ability
to see what really goes on, what kind of data the application is
mining for and where it ends up etc...
I went to the Flash Exploits talk last night, and it was great. As far
as I can tell, none of the bugs he mentioned apply to Gnash at all. They
are mostly implementation bugs, and not problems with flash itself. I
have a PDF of his talk, plus all the code for the exploits.
(http://www.flashsec.org), so I'll stick it in a test suite when I get
back from the Chaos Camp. Good stuff. It turns out he's been playing
with Gnash too, and likes it, so we're trying to see what we can all do
together to make a *secure* flash player. I talked about the security
layer in Gnash, and he says it all sounds like were going in the right
direction. So we'll see what we can do to work together.
- rob -
_______________________________________________
Gnash-dev mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/gnash-dev
