Re: [Flashcoders] Storing x and y in a bytearray

2009-03-31 Thread Steven Sacks

http://polygonal.de

If you want to learn about maximum optimization for collision detection, etc. 
nobody knows more than this guy.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


[Flashcoders] Domain-issue

2009-03-31 Thread Remco Hoff
Hi,

I have a question about the domain an swf thinks he is in.

For example, a page on www.mysite.com loads an swf from www.mycontent.com.
What domain does the swf think he is in, mysite.com or mycontent.com?

I think I know, just want to be sure.

Anyone?

Remco
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


[Flashcoders] Cross-domain policy - why is Flex more forgiving than Flash?

2009-03-31 Thread Johan Nyberg
I'm getting tired of Flash's unforgiving cross-domain policy. Why can't 
I read an xml-feed, content produced by a php file or a simple text file 
without Flash wagging that finger in my face saying No, no, you can't, 
not without that site allowing your site access in the crossdomain.xml.


But why on earth is that so? I mean, the same file can easily be read by 
an ordinary browser!? What on earth could i concoct with my devious, 
malignant Flash application with the same file?


And, I've also discovered that Flex is more forgiving. I can pull in 
content from another domain without said crossdomain.xml by using a 
HTTPService component.


I would greatly appreciate if anyone could shed some light on this. And, 
if anyone can point out if I'm doing anything wrong here.


But please don't tell me to get my domain name into that other servers 
cross-domain policy file. There are many situations where this is not 
possible, and where it would still be legitimate to read content from 
that site.


And, as I said before, the browser doesn't need that permission. Nor 
does Flex, apparently.


Regards,

--
Johan Nyberg

Web Guide Partner
Engelbrektsplan 1
114 34 Stockholm
08 - 50 00 24 30
070 - 407 83 00
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving than Flash?

2009-03-31 Thread Dave Watts
 And, I've also discovered that Flex is more forgiving. I can pull in content
 from another domain without said crossdomain.xml by using a HTTPService
 component.

That has not been my experience at all. I suggest you test this again.

 But please don't tell me to get my domain name into that other servers
 cross-domain policy file. There are many situations where this is not
 possible, and where it would still be legitimate to read content from that
 site.

Use a server-side proxy. LiveCycle Data Services and BlazeDS provide a
proxy service, but frankly it's easy enough to build this kind of
thing using any application server.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Domain-issue

2009-03-31 Thread Remco Hoff
This is not what I expected, are you sure?
Do you know any documentation about this?

Remco

On Tue, Mar 31, 2009 at 2:01 PM, Cor c...@chello.nl wrote:

 In mycontent.com.
 So there will be thrown a Sandbox violation.

 HTH
 Cor

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving thanFlash?

2009-03-31 Thread Meinte van't Kruis
Still, I agree with John, on the XML part. If everybody and everything can
read an XML on a random server, why can't Flash, it doesn't make any sense.

On Tue, Mar 31, 2009 at 5:33 PM, Muzak p.ginnebe...@telenet.be wrote:

 And, I've also discovered that Flex is more forgiving. I can pull in
 content from another domain without said crossdomain.xml by using a
 HTTPService component.


 That's not correct.
 Doesn't matter if it's Flex or Flash. It's the Flash Player that enforces
 security, not the tool that created the swf.
 Different rules apply to different swf versions, so if Flex compiles to fp9
 and Flash CS4 compiles to fp10, you may see different results.
 Even minor revisions may show different results (e.g. 9.0.45 vs 9.0.124).

  But why on earth is that so? I mean, the same file can easily be read by
 an ordinary browser!? What on earth could i concoct with my devious,
 malignant Flash application with the same file?


 Well, it's not about what your intensions are, they may be all good,
 but not everyone has those same good intensions :)

 Think about banner ads that are displayed *wherever*.
 Do you really want those to be able to read/load/execute anything they feel
 like from your site/server?

 There's quite alot of info on the Adobe site regarding security:
 http://www.adobe.com/devnet/flashplayer/security.html
 http://www.adobe.com/devnet/security/
 http://www.adobe.com/products/flashplayer/security/

 regards,
 Muzak

 - Original Message - From: Johan Nyberg 
 johan.nyb...@webguidepartner.com
 To: flashcoders@chattyfig.figleaf.com
 Sent: Tuesday, March 31, 2009 2:17 PM
 Subject: [Flashcoders] Cross-domain policy - why is Flex more forgiving
 thanFlash?


  I'm getting tired of Flash's unforgiving cross-domain policy. Why can't I
 read an xml-feed, content produced by a php file or a simple text file
 without Flash wagging that finger in my face saying No, no, you can't, not
 without that site allowing your site access in the crossdomain.xml.

 But why on earth is that so? I mean, the same file can easily be read by
 an ordinary browser!? What on earth could i concoct with my devious,
 malignant Flash application with the same file?

 And, I've also discovered that Flex is more forgiving. I can pull in
 content from another domain without said crossdomain.xml by using a
 HTTPService component.

 I would greatly appreciate if anyone could shed some light on this. And,
 if anyone can point out if I'm doing anything wrong here.

 But please don't tell me to get my domain name into that other servers
 cross-domain policy file. There are many situations where this is not
 possible, and where it would still be legitimate to read content from that
 site.

 And, as I said before, the browser doesn't need that permission. Nor does
 Flex, apparently.

 Regards,

 --
 Johan Nyberg

 Web Guide Partner


 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




-- 
M.A. van't Kruis
http://www.malatze.nl/
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving thanFlash?

2009-03-31 Thread Glen Pike
I would agree with John too - If it's up there, it's public - I guess 
that's the point.


The crossdomain policy thing bugs me a great deal, especially when I 
have to implement the response in each program running on a port I 
want to connect to.   For files: I know what file I want to load from 
somewhere - I programmed it into the Flash myself.  So why do I have to 
jump through hoops to get to it?  For passive content - XML / Images / 
Movies, I would expect that if I know the URL of something I can load 
it.  If that server wants to stop me, then it's upto that server.  I get 
the point for non-passive content with XSS, etc, but it seems that the 
policies are way of solving something that is an issue somewhere else 
that then makes it extremely difficult for normal people - maybe I just 
don't get it totally :)


If a banner ad reads something on my server - so what?  Sureley it's up 
to me as the sysadmin to make sure of the access control / permissions 
for my data, not Flash Player's to stick a big plaster (Band Aid) over 
security holes left by my bad programming.


Now which is your favourite editor :)

Meinte van't Kruis wrote:

Still, I agree with John, on the XML part. If everybody and everything can
read an XML on a random server, why can't Flash, it doesn't make any sense.

On Tue, Mar 31, 2009 at 5:33 PM, Muzak p.ginnebe...@telenet.be wrote:

  

And, I've also discovered that Flex is more forgiving. I can pull in


content from another domain without said crossdomain.xml by using a
HTTPService component.

  

That's not correct.
Doesn't matter if it's Flex or Flash. It's the Flash Player that enforces
security, not the tool that created the swf.
Different rules apply to different swf versions, so if Flex compiles to fp9
and Flash CS4 compiles to fp10, you may see different results.
Even minor revisions may show different results (e.g. 9.0.45 vs 9.0.124).

 But why on earth is that so? I mean, the same file can easily be read by


an ordinary browser!? What on earth could i concoct with my devious,
malignant Flash application with the same file?

  

Well, it's not about what your intensions are, they may be all good,
but not everyone has those same good intensions :)

Think about banner ads that are displayed *wherever*.
Do you really want those to be able to read/load/execute anything they feel
like from your site/server?

There's quite alot of info on the Adobe site regarding security:
http://www.adobe.com/devnet/flashplayer/security.html
http://www.adobe.com/devnet/security/
http://www.adobe.com/products/flashplayer/security/

regards,
Muzak

- Original Message - From: Johan Nyberg 
johan.nyb...@webguidepartner.com
To: flashcoders@chattyfig.figleaf.com
Sent: Tuesday, March 31, 2009 2:17 PM
Subject: [Flashcoders] Cross-domain policy - why is Flex more forgiving
thanFlash?


 I'm getting tired of Flash's unforgiving cross-domain policy. Why can't I


read an xml-feed, content produced by a php file or a simple text file
without Flash wagging that finger in my face saying No, no, you can't, not
without that site allowing your site access in the crossdomain.xml.

But why on earth is that so? I mean, the same file can easily be read by
an ordinary browser!? What on earth could i concoct with my devious,
malignant Flash application with the same file?

And, I've also discovered that Flex is more forgiving. I can pull in
content from another domain without said crossdomain.xml by using a
HTTPService component.

I would greatly appreciate if anyone could shed some light on this. And,
if anyone can point out if I'm doing anything wrong here.

But please don't tell me to get my domain name into that other servers
cross-domain policy file. There are many situations where this is not
possible, and where it would still be legitimate to read content from that
site.

And, as I said before, the browser doesn't need that permission. Nor does
Flex, apparently.

Regards,

--
Johan Nyberg

Web Guide Partner

  

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders






  


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving thanFlash?

2009-03-31 Thread Juan Pablo Califano
I agree.

I understand the need for some kind of restrictions to prevent XSS attacks
and such.

Yet, the implementation strikes me as rather lame, since it doesn't
cover very common and perfectly valid use cases (load an xml, an image,
consume a webservice, etc; it's not always possible to place a crossdomain
file in a server you don't neccesarily control but to which you are allowed
to access since its resources are public).



Cheers
Juan Pablo Califano


2009/3/31, Glen Pike g...@engineeredarts.co.uk:

 I would agree with John too - If it's up there, it's public - I guess
 that's the point.

 The crossdomain policy thing bugs me a great deal, especially when I have
 to implement the response in each program running on a port I want to
 connect to.   For files: I know what file I want to load from somewhere -
 I programmed it into the Flash myself.  So why do I have to jump through
 hoops to get to it?  For passive content - XML / Images / Movies, I would
 expect that if I know the URL of something I can load it.  If that server
 wants to stop me, then it's upto that server.  I get the point for
 non-passive content with XSS, etc, but it seems that the policies are way of
 solving something that is an issue somewhere else that then makes it
 extremely difficult for normal people - maybe I just don't get it totally :)

 If a banner ad reads something on my server - so what?  Sureley it's up to
 me as the sysadmin to make sure of the access control / permissions for my
 data, not Flash Player's to stick a big plaster (Band Aid) over security
 holes left by my bad programming.

 Now which is your favourite editor :)

 Meinte van't Kruis wrote:

 Still, I agree with John, on the XML part. If everybody and everything can
 read an XML on a random server, why can't Flash, it doesn't make any
 sense.

 On Tue, Mar 31, 2009 at 5:33 PM, Muzak p.ginnebe...@telenet.be wrote:



 And, I've also discovered that Flex is more forgiving. I can pull in


 content from another domain without said crossdomain.xml by using a
 HTTPService component.



 That's not correct.
 Doesn't matter if it's Flex or Flash. It's the Flash Player that enforces
 security, not the tool that created the swf.
 Different rules apply to different swf versions, so if Flex compiles to
 fp9
 and Flash CS4 compiles to fp10, you may see different results.
 Even minor revisions may show different results (e.g. 9.0.45 vs 9.0.124).

  But why on earth is that so? I mean, the same file can easily be read by


 an ordinary browser!? What on earth could i concoct with my devious,
 malignant Flash application with the same file?



 Well, it's not about what your intensions are, they may be all good,
 but not everyone has those same good intensions :)

 Think about banner ads that are displayed *wherever*.
 Do you really want those to be able to read/load/execute anything they
 feel
 like from your site/server?

 There's quite alot of info on the Adobe site regarding security:
 http://www.adobe.com/devnet/flashplayer/security.html
 http://www.adobe.com/devnet/security/
 http://www.adobe.com/products/flashplayer/security/

 regards,
 Muzak

 - Original Message - From: Johan Nyberg 
 johan.nyb...@webguidepartner.com
 To: flashcoders@chattyfig.figleaf.com
 Sent: Tuesday, March 31, 2009 2:17 PM
 Subject: [Flashcoders] Cross-domain policy - why is Flex more forgiving
 thanFlash?


  I'm getting tired of Flash's unforgiving cross-domain policy. Why can't
 I


 read an xml-feed, content produced by a php file or a simple text file
 without Flash wagging that finger in my face saying No, no, you can't,
 not
 without that site allowing your site access in the crossdomain.xml.

 But why on earth is that so? I mean, the same file can easily be read by
 an ordinary browser!? What on earth could i concoct with my devious,
 malignant Flash application with the same file?

 And, I've also discovered that Flex is more forgiving. I can pull in
 content from another domain without said crossdomain.xml by using a
 HTTPService component.

 I would greatly appreciate if anyone could shed some light on this. And,
 if anyone can point out if I'm doing anything wrong here.

 But please don't tell me to get my domain name into that other servers
 cross-domain policy file. There are many situations where this is not
 possible, and where it would still be legitimate to read content from
 that
 site.

 And, as I said before, the browser doesn't need that permission. Nor
 does
 Flex, apparently.

 Regards,

 --
 Johan Nyberg

 Web Guide Partner



 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders









 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

___
Flashcoders mailing list

Re: [Flashcoders] FPS question

2009-03-31 Thread Anthony Pace

Sorry I didn't respond earlier... passed out last night and just woke up.

http://www.flashperfection.com/tutorials/AS3-Dynamically-Change-The-Frame-Rate-09765.html

Should help you out.

Karl DeSaulniers wrote:

in this i mean movie = swf .
i am not necessarily asking about just a moviclip but the whole movie.
Hope that clarifies.

Karl DeSaulniers
Design Drumm
http://designdrumm.com

On Mar 30, 2009, at 8:47 PM, Anthony Pace wrote:

First you say swf, and yes, controlling the frame rate for an swf is 
doable; yet, then you say movie... do you mean movie clip, or stream?


Karl DeSaulniers wrote:
Ok here is a new one. Is there a way to control the way your swf 
plays according to the bandwidth it's getting?


For eg: control how fast FPS your movie plays according to the 
stream of info it's getting from the server? If the stream is low 
play fast and if the stream is good then play regular fps?


All of this to simulate no lag.

Karl

Sent from losPhone

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving thanFlash?

2009-03-31 Thread Juan Delgado
There was a very good explanation, but I cannot find it now. It goes
somehow like this:

Flash applications in a browser run *behind* your firewall. When you
access a page using the browser, any Flash app could start making
petitions to the servers inside your network (not that difficult to
find or guess IP addresses) and without crossdomain.xml file you
wouldn't be able to stop those requests.

With the current model, Flash apps (a malicious banner, for example)
cannot fetch content of those servers because most likely they don't
have a crossdomain.xml. Thus, secure by default.

[Found it!]

Check this out:

http://www.martijndevisser.com/blog/2005/why-crossdomainxml-is-a-good-thing/

Cheers,

Juan

On Tue, Mar 31, 2009 at 5:53 PM, Juan Pablo Califano
califa010.flashcod...@gmail.com wrote:
 I agree.

 I understand the need for some kind of restrictions to prevent XSS attacks
 and such.

 Yet, the implementation strikes me as rather lame, since it doesn't
 cover very common and perfectly valid use cases (load an xml, an image,
 consume a webservice, etc; it's not always possible to place a crossdomain
 file in a server you don't neccesarily control but to which you are allowed
 to access since its resources are public).



 Cheers
 Juan Pablo Califano


 2009/3/31, Glen Pike g...@engineeredarts.co.uk:

 I would agree with John too - If it's up there, it's public - I guess
 that's the point.

 The crossdomain policy thing bugs me a great deal, especially when I have
 to implement the response in each program running on a port I want to
 connect to.   For files: I know what file I want to load from somewhere -
 I programmed it into the Flash myself.  So why do I have to jump through
 hoops to get to it?  For passive content - XML / Images / Movies, I would
 expect that if I know the URL of something I can load it.  If that server
 wants to stop me, then it's upto that server.  I get the point for
 non-passive content with XSS, etc, but it seems that the policies are way of
 solving something that is an issue somewhere else that then makes it
 extremely difficult for normal people - maybe I just don't get it totally :)

 If a banner ad reads something on my server - so what?  Sureley it's up to
 me as the sysadmin to make sure of the access control / permissions for my
 data, not Flash Player's to stick a big plaster (Band Aid) over security
 holes left by my bad programming.

 Now which is your favourite editor :)

 Meinte van't Kruis wrote:

 Still, I agree with John, on the XML part. If everybody and everything can
 read an XML on a random server, why can't Flash, it doesn't make any
 sense.

 On Tue, Mar 31, 2009 at 5:33 PM, Muzak p.ginnebe...@telenet.be wrote:



 And, I've also discovered that Flex is more forgiving. I can pull in


 content from another domain without said crossdomain.xml by using a
 HTTPService component.



 That's not correct.
 Doesn't matter if it's Flex or Flash. It's the Flash Player that enforces
 security, not the tool that created the swf.
 Different rules apply to different swf versions, so if Flex compiles to
 fp9
 and Flash CS4 compiles to fp10, you may see different results.
 Even minor revisions may show different results (e.g. 9.0.45 vs 9.0.124).

  But why on earth is that so? I mean, the same file can easily be read by


 an ordinary browser!? What on earth could i concoct with my devious,
 malignant Flash application with the same file?



 Well, it's not about what your intensions are, they may be all good,
 but not everyone has those same good intensions :)

 Think about banner ads that are displayed *wherever*.
 Do you really want those to be able to read/load/execute anything they
 feel
 like from your site/server?

 There's quite alot of info on the Adobe site regarding security:
 http://www.adobe.com/devnet/flashplayer/security.html
 http://www.adobe.com/devnet/security/
 http://www.adobe.com/products/flashplayer/security/

 regards,
 Muzak

 - Original Message - From: Johan Nyberg 
 johan.nyb...@webguidepartner.com
 To: flashcoders@chattyfig.figleaf.com
 Sent: Tuesday, March 31, 2009 2:17 PM
 Subject: [Flashcoders] Cross-domain policy - why is Flex more forgiving
 thanFlash?


  I'm getting tired of Flash's unforgiving cross-domain policy. Why can't
 I


 read an xml-feed, content produced by a php file or a simple text file
 without Flash wagging that finger in my face saying No, no, you can't,
 not
 without that site allowing your site access in the crossdomain.xml.

 But why on earth is that so? I mean, the same file can easily be read by
 an ordinary browser!? What on earth could i concoct with my devious,
 malignant Flash application with the same file?

 And, I've also discovered that Flex is more forgiving. I can pull in
 content from another domain without said crossdomain.xml by using a
 HTTPService component.

 I would greatly appreciate if anyone could shed some light on this. And,
 if anyone can point out if I'm doing anything wrong here.

 

Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving thanFlash?

2009-03-31 Thread Muzak

If everybody and everything can
read an XML on a random server, why can't Flash, it doesn't make any sense.


Because the Flash Player can't determine if you're *allowed* to read that particular xml file or not, nor does it know your 
intensions.
So rather than allowing it and hoping for the best, it shuts the door for everyone and provides a means to open a backdoor (if you 
like) through the use of policy files.


When this was first implemented (Flash 6) this was highly annoying since noone 
out there had policy files in place.
Nowadays service providers (Xmethods/Yahoo/Amazon/etc..) have those in place 
and their public services can be used with Flash.

If there's a public service you'd like to use and they don't have a policy file in place, contact them, explain them what you want 
and why and point them to the appropriate pages on the Adobe site.

I've done so in the past and up to now I never had a no go.

http://www.xmethods.net/crossdomain.xml
http://www.yahoo.com/crossdomain.xml
http://search.yahooapis.com/crossdomain.xml

http://developer.yahoo.com/faq/#flash

The way I see it, crossdomain policy files are here to stay, so might as well 
deal with it :)

regards,
Muzak

- Original Message - 
From: Meinte van't Kruis mei...@gmail.com

To: Flash Coders List flashcoders@chattyfig.figleaf.com
Sent: Tuesday, March 31, 2009 5:59 PM
Subject: Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving 
thanFlash?



Still, I agree with John, on the XML part. If everybody and everything can
read an XML on a random server, why can't Flash, it doesn't make any sense.



___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Cross-domain policy - why is Flex more forgiving thanFlash?

2009-03-31 Thread Juan Pablo Califano
Ok, that's a solid argument, thanks for the link!

The other one (preventing access to an internet public resource on a server
located on a different domain), though, seems weak, since any hacker
wannabe could use a server-side proxy (the most basic could be just one
line of php) to access to other internet domains transparently.

Cheers
Juan Pablo Califano


2009/3/31, Juan Delgado zzzar...@gmail.com:

 There was a very good explanation, but I cannot find it now. It goes
 somehow like this:

 Flash applications in a browser run *behind* your firewall. When you
 access a page using the browser, any Flash app could start making
 petitions to the servers inside your network (not that difficult to
 find or guess IP addresses) and without crossdomain.xml file you
 wouldn't be able to stop those requests.

 With the current model, Flash apps (a malicious banner, for example)
 cannot fetch content of those servers because most likely they don't
 have a crossdomain.xml. Thus, secure by default.

 [Found it!]

 Check this out:


 http://www.martijndevisser.com/blog/2005/why-crossdomainxml-is-a-good-thing/

 Cheers,

 Juan

 On Tue, Mar 31, 2009 at 5:53 PM, Juan Pablo Califano
 califa010.flashcod...@gmail.com wrote:
  I agree.
 
  I understand the need for some kind of restrictions to prevent XSS
 attacks
  and such.
 
  Yet, the implementation strikes me as rather lame, since it doesn't
  cover very common and perfectly valid use cases (load an xml, an image,
  consume a webservice, etc; it's not always possible to place a
 crossdomain
  file in a server you don't neccesarily control but to which you are
 allowed
  to access since its resources are public).
 
 
 
  Cheers
  Juan Pablo Califano
 
 
  2009/3/31, Glen Pike g...@engineeredarts.co.uk:
 
  I would agree with John too - If it's up there, it's public - I guess
  that's the point.
 
  The crossdomain policy thing bugs me a great deal, especially when I
 have
  to implement the response in each program running on a port I want to
  connect to.   For files: I know what file I want to load from
 somewhere -
  I programmed it into the Flash myself.  So why do I have to jump through
  hoops to get to it?  For passive content - XML / Images / Movies, I
 would
  expect that if I know the URL of something I can load it.  If that
 server
  wants to stop me, then it's upto that server.  I get the point for
  non-passive content with XSS, etc, but it seems that the policies are
 way of
  solving something that is an issue somewhere else that then makes it
  extremely difficult for normal people - maybe I just don't get it
 totally :)
 
  If a banner ad reads something on my server - so what?  Sureley it's up
 to
  me as the sysadmin to make sure of the access control / permissions for
 my
  data, not Flash Player's to stick a big plaster (Band Aid) over security
  holes left by my bad programming.
 
  Now which is your favourite editor :)
 
  Meinte van't Kruis wrote:
 
  Still, I agree with John, on the XML part. If everybody and everything
 can
  read an XML on a random server, why can't Flash, it doesn't make any
  sense.
 
  On Tue, Mar 31, 2009 at 5:33 PM, Muzak p.ginnebe...@telenet.be
 wrote:
 
 
 
  And, I've also discovered that Flex is more forgiving. I can pull in
 
 
  content from another domain without said crossdomain.xml by using a
  HTTPService component.
 
 
 
  That's not correct.
  Doesn't matter if it's Flex or Flash. It's the Flash Player that
 enforces
  security, not the tool that created the swf.
  Different rules apply to different swf versions, so if Flex compiles
 to
  fp9
  and Flash CS4 compiles to fp10, you may see different results.
  Even minor revisions may show different results (e.g. 9.0.45 vs
 9.0.124).
 
   But why on earth is that so? I mean, the same file can easily be read
 by
 
 
  an ordinary browser!? What on earth could i concoct with my devious,
  malignant Flash application with the same file?
 
 
 
  Well, it's not about what your intensions are, they may be all good,
  but not everyone has those same good intensions :)
 
  Think about banner ads that are displayed *wherever*.
  Do you really want those to be able to read/load/execute anything they
  feel
  like from your site/server?
 
  There's quite alot of info on the Adobe site regarding security:
  http://www.adobe.com/devnet/flashplayer/security.html
  http://www.adobe.com/devnet/security/
  http://www.adobe.com/products/flashplayer/security/
 
  regards,
  Muzak
 
  - Original Message - From: Johan Nyberg 
  johan.nyb...@webguidepartner.com
  To: flashcoders@chattyfig.figleaf.com
  Sent: Tuesday, March 31, 2009 2:17 PM
  Subject: [Flashcoders] Cross-domain policy - why is Flex more
 forgiving
  thanFlash?
 
 
   I'm getting tired of Flash's unforgiving cross-domain policy. Why
 can't
  I
 
 
  read an xml-feed, content produced by a php file or a simple text
 file
  without Flash wagging that finger in my face saying No, no, you
 can't,
  not
  without 

Re: [Flashcoders] FPS question

2009-03-31 Thread Paul Andrews

I'm pretty confused by your requested, so I've probably got this wrong.

You're trying to slow down a playing movie because it's not streaming it's 
content fast enough to play at the true frame rate?


Paul



- Original Message - 
From: Karl DeSaulniers k...@designdrumm.com

To: Flash Coders List flashcoders@chattyfig.figleaf.com
Sent: Tuesday, March 31, 2009 7:10 PM
Subject: Re: [Flashcoders] FPS question


Sorry I guess I was not clear on my first post, but I am looking to  find 
out how to ready how much stream I am getting and adjust my  frame rate of 
the movie (swf) accordingly. Main part of my question  is to figure out 
how to get the stream info so to be able to adjust  the FPS to it. 
Better?? Thanks for any input.


Anthony, thanks for the FPS link, that will come in handy.
BTW I am still coding in AS2 for this project.



Karl DeSaulniers
Design Drumm
http://designdrumm.com

On Mar 31, 2009, at 12:04 PM, Anthony Pace wrote:

Sorry I didn't respond earlier... passed out last night and just  woke 
up.


http://www.flashperfection.com/tutorials/AS3-Dynamically-Change-The- 
Frame-Rate-09765.html


Should help you out.

Karl DeSaulniers wrote:

in this i mean movie = swf .
i am not necessarily asking about just a moviclip but the whole  movie.
Hope that clarifies.

Karl DeSaulniers
Design Drumm
http://designdrumm.com

On Mar 30, 2009, at 8:47 PM, Anthony Pace wrote:

First you say swf, and yes, controlling the frame rate for an swf  is 
doable; yet, then you say movie... do you mean movie clip, or  stream?


Karl DeSaulniers wrote:
Ok here is a new one. Is there a way to control the way your swf 
plays according to the bandwidth it's getting?


For eg: control how fast FPS your movie plays according to the  stream 
of info it's getting from the server? If the stream is  low play fast 
and if the stream is good then play regular fps?


All of this to simulate no lag.

Karl

Sent from losPhone

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders 


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] FPS question

2009-03-31 Thread Karl DeSaulniers
Close. I am trying to basically see if I can control how fast my movie  
plays according to the type of stream it is receiving. If slow on  
bandwidth play faster, if normal or high bandwidth play at normal fps.  
So that when their is low bandwidth while loading page, the user never  
knows or sees it. No lag if you will.


Sent from losPhone

On Mar 31, 2009, at 1:24 PM, Paul Andrews p...@ipauland.com wrote:

I'm pretty confused by your requested, so I've probably got this  
wrong.


You're trying to slow down a playing movie because it's not  
streaming it's content fast enough to play at the true frame rate?


Paul



- Original Message - From: Karl DeSaulniers k...@designdrumm.com 


To: Flash Coders List flashcoders@chattyfig.figleaf.com
Sent: Tuesday, March 31, 2009 7:10 PM
Subject: Re: [Flashcoders] FPS question


Sorry I guess I was not clear on my first post, but I am looking  
to  find out how to ready how much stream I am getting and adjust  
my  frame rate of the movie (swf) accordingly. Main part of my  
question  is to figure out how to get the stream info so to be able  
to adjust  the FPS to it. Better?? Thanks for any input.


Anthony, thanks for the FPS link, that will come in handy.
BTW I am still coding in AS2 for this project.



Karl DeSaulniers
Design Drumm
http://designdrumm.com

On Mar 31, 2009, at 12:04 PM, Anthony Pace wrote:

Sorry I didn't respond earlier... passed out last night and just   
woke up.


http://www.flashperfection.com/tutorials/AS3-Dynamically-Change- 
The- Frame-Rate-09765.html


Should help you out.

Karl DeSaulniers wrote:

in this i mean movie = swf .
i am not necessarily asking about just a moviclip but the whole   
movie.

Hope that clarifies.

Karl DeSaulniers
Design Drumm
http://designdrumm.com

On Mar 30, 2009, at 8:47 PM, Anthony Pace wrote:

First you say swf, and yes, controlling the frame rate for an  
swf  is doable; yet, then you say movie... do you mean movie  
clip, or  stream?


Karl DeSaulniers wrote:
Ok here is a new one. Is there a way to control the way your  
swf plays according to the bandwidth it's getting?


For eg: control how fast FPS your movie plays according to the   
stream of info it's getting from the server? If the stream is   
low play fast and if the stream is good then play regular fps?


All of this to simulate no lag.

Karl

Sent from losPhone

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] FPS question

2009-03-31 Thread Karl DeSaulniers

Like a true 30fps no matter what the stream

Sent from losPhone

On Mar 31, 2009, at 1:54 PM, Karl DeSaulniers k...@designdrumm.com  
wrote:


Close. I am trying to basically see if I can control how fast my  
movie plays according to the type of stream it is receiving. If slow  
on bandwidth play faster, if normal or high bandwidth play at normal  
fps. So that when their is low bandwidth while loading page, the  
user never knows or sees it. No lag if you will.


Sent from losPhone

On Mar 31, 2009, at 1:24 PM, Paul Andrews p...@ipauland.com wrote:

I'm pretty confused by your requested, so I've probably got this  
wrong.


You're trying to slow down a playing movie because it's not  
streaming it's content fast enough to play at the true frame rate?


Paul



- Original Message - From: Karl DeSaulniers k...@designdrumm.com 


To: Flash Coders List flashcoders@chattyfig.figleaf.com
Sent: Tuesday, March 31, 2009 7:10 PM
Subject: Re: [Flashcoders] FPS question


Sorry I guess I was not clear on my first post, but I am looking  
to  find out how to ready how much stream I am getting and adjust  
my  frame rate of the movie (swf) accordingly. Main part of my  
question  is to figure out how to get the stream info so to be  
able to adjust  the FPS to it. Better?? Thanks for any input.


Anthony, thanks for the FPS link, that will come in handy.
BTW I am still coding in AS2 for this project.



Karl DeSaulniers
Design Drumm
http://designdrumm.com

On Mar 31, 2009, at 12:04 PM, Anthony Pace wrote:

Sorry I didn't respond earlier... passed out last night and just   
woke up.


http://www.flashperfection.com/tutorials/AS3-Dynamically-Change-The- 
 Frame-Rate-09765.html


Should help you out.

Karl DeSaulniers wrote:

in this i mean movie = swf .
i am not necessarily asking about just a moviclip but the whole   
movie.

Hope that clarifies.

Karl DeSaulniers
Design Drumm
http://designdrumm.com

On Mar 30, 2009, at 8:47 PM, Anthony Pace wrote:

First you say swf, and yes, controlling the frame rate for an  
swf  is doable; yet, then you say movie... do you mean movie  
clip, or  stream?


Karl DeSaulniers wrote:
Ok here is a new one. Is there a way to control the way your  
swf plays according to the bandwidth it's getting?


For eg: control how fast FPS your movie plays according to  
the  stream of info it's getting from the server? If the  
stream is  low play fast and if the stream is good then play  
regular fps?


All of this to simulate no lag.

Karl

Sent from losPhone

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


[Flashcoders] AS3: How to check if an URLVariables contains a field?

2009-03-31 Thread Alexander Farber
Hello,

I have the following function called repeatedly:

private function handleComplete(event:Event):void {
var urlvars:URLVariables = event.target.data;
.
if (urlvars.lobby) {
.
} else if (urlvars.bids) {
populate(urlvars.bids, User.BIDS);
} else if (urlvars.cards) {
populate(urlvars.cards, Card.CARDS);
}
}

and for some strange reason eventhough
the urlvars doesn't contain the field bids
(I watch the urlvars in debugger and
advance step by step), the function
populate(urlvars.bids, User.BIDS);
still gets called (and then fails with
TypeError: Error #1009: Cannot access a property or method of a null
object reference.
at Pref/populate() )

I don't understand why it happens and
how should I perform the check instead...

Any advices please?

Thank you
Alex
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders