Flash8: Security problems – still no solution

Monday, December 12th, 2005

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

Hey everybody, i got still no solution for my problem. Look at my original post: Flash8: Security problems.

Here is description of problem from g.wygonik (Seems better description of my problem):

john – i think the single line question would be:

“What does a Flash developer have to do to make a Flash movie that runs in the browser from the net access local assets, given that all the methods Macromedia list have been tested and do not seem to work?”

and then, perhaps:

“Can Macromedia please make some sort of document or post that clearly states how to do this, instead of having to read through multiple web sites, PDF white papers, and several blog posts?”

whew!
g.

If anyone has solution for this, pleeeeease let me know, I need this solution ASAP for my company. It’s real big problem. We bought Flash 8, but can’t use it, because of such security reasons. That’s no good.

tagged under:

Digg | Del.icio.us | Stumble | Reddit

ABOUT THIS AUTHOR

Franto

Get a Trackback link

16 Comments

Cedric
• Visit Site
December 12th, 2005

Macromedia is not keen on finding solutions given problems they’d setup really!

but, Flash’s users are keen on that … don’t hold to the mother, she’s a bioooaaatch…

Like with SHARED ASSETS (still laughing), the solutions are out there, but not on Macromedia’s side (nor site) … actually, they have some weird way of finding solutions for the tools THEY did develop …

sorry for my lack of positive comments … but don’t wait for MM to come up with a solution ..

are we gonna make it ???
cosmin
• Visit Site
December 12th, 2005

may no longer load any content (SWF, HTML, PNG, and so on) from local paths.”>

I think that’s all folks.
The user would have to dload the swf and open it from a local path in order for that swf to be able to read from the local computer.
But for a local runned swf to read from local it needs the user to go to the MM site at security settings to allow the file or folder.
I recently made a kiosk and lost some braincells in the process when swiching to flash8.
my lucky break was that I made it an .exe and was able to write the permission .cfg file in the:
C:\Documents and Settings\[current user]\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust\
folder
Administrator
• Visit Site
December 12th, 2005

You know Cedric, I NEED THIS ASAP

so at least, I have to make it !!! But it will be great if anyone will help me, or if he got solution already
cosmin
• Visit Site
December 12th, 2005

hmm, messed up comment followup. Attempt one:

may no longer load any content (SWF, HTML, PNG, and so on) from local paths.”>

I think that’s all folks.
The user would have to dload the swf and open it from a local path in order for that swf to be able to read from the local computer.
But for a local runned swf to read from local it needs the user to go to the MM site at security settings to allow the file or folder.
I recently made a kiosk and lost some braincells in the process when swiching to flash8.
my lucky break was that I made it an .exe and was able to write the permission .cfg file in the:
C:\Documents and Settings\[current user]\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust\
folder
cosmin
• Visit Site
December 12th, 2005

I give up.
It’s readable.
Administrator
• Visit Site
December 12th, 2005

cosmin, i sent you email
hey
• Visit Site
December 12th, 2005

This is a big step back for flash 8 la ocho. Is breaking my 8 ballz.
JesterXL
• Visit Site
December 12th, 2005

Nothing helpful to add, but just glad you are keeping us updated on how this pans out.
Administrator
• Visit Site
December 12th, 2005

i’ve got solution, but now it’s working only in Firefox, not IE

I will write about it soon, must find out why it doesnt work for IE, but it’s base on simple HTTP server on localhost…so you need not to load file from file:///c:/test.swf, but instead http://localhost:8080/test.swf

This is advice from Theodor Patrick, and source of simple HTTP server will be in IFBIN (IFBIN works on this solution)
John Dowdell
• Visit Site
December 12th, 2005

“… given that all the methods Macromedia list have been tested and do not seem to work…”

This is where I get a little unsure, because I know that people generally *do* use the methods described in these documents to good effect:
http://www.macromedia.com/devnet/flash/articles/fplayer8_security.html
http://www.macromedia.com/go/4c093f20

I believe you’re seeing what you’re seeing, but I’m not sure yet how others can make it happen too. That’s why it’s hard for me to reply directly.

hmm… maybe one way to get to the bottom of this would be to see if you can use the above methods in a new, smaller, simpler test project… that would let us focus more directly on the steps. Do you know yet which of the four types of sandboxes you’re in?
http://www.macromedia.com/devnet/flash/articles/fplayer8_security_03.html

jd/adobe
Administrator
• Visit Site
December 12th, 2005

John, sure i have small test application, which I’ve already sent to Gilles Drieu (I spoke with him at Spark conference in Amsterdam), he got it, I will upload it here tommorow, i got it only in office, not home.

But I have solution with HTTP server, but I want solution that should work normally as is described by macromedia….

And i do not know any flash coder, which done this, i spoke with many flash coders over the world, no one could do this, so if you know someone, who did it, please, can you give me contact to him?

Thanks many times
Chris Benjaminsen
• Visit Site
December 13th, 2005

I always prefered just to slam a webserver on the kiosk maschine, say an apache on *nix computers, or just the personal webserver for windows kioks.

Then just create a entry in your hosts file that points localhost.domain.com to the local webserver and use that from your hostfile.

Ofcouse this is not a perfect solution if you want the users to install some files on there computer to minimize download time. For that there is nothing else to do then config the cache settings on the webserver as good as possible.

/Chris
Campbell Anderson
• Visit Site
January 10th, 2006

I can make you a small app that loads the top level swf (movie player) from the web and allows access to the harddrive. I have done it before and have the remanants which works….but you have to have .net on the computer (sorry dont know c++ well enough to do it in that)
would that help? Basically you will have to wrap it to get around the security………

Campbell
Jan Guichelaar
• Visit Site
January 13th, 2006

Hi all

I encountered the same problem last week.
We made a website for a client with flash8, html, ajax, and javascript. It works all fine online.

Now the client is so satisfied, he wants the whole site on a cdrom.
To run the site from cdrom we’re entering the flash 8 security problem zone. Loading flv’s is not a problem, but calling javascript from flash gives the security alert from flash, wich guides you to the ‘ONLINE’ security manager. The whole purpose of putting the site on a cdrom is to be able to view it without an internet connection.

We came up with a (for me) very nice solution. We made an installer wich installs the complete site and content on the users computer and puts the right .cfg files in the right folders.

But now the client doesn;t trust installers …….so.. back to the drawing board.

It seems flash 8 is made for online use, not for offline use.

to MM: do something about this!

jan
jot
• Visit Site
January 20th, 2006

quote: Macromedia is aware of the impact these changes have on our customers and we do not undertake such projects lightly. We offer our sincere apologies if you find yourself affected.

=/
michal
• Visit Site
March 15th, 2006

Try this Maybe could help.
http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager04.html

And if not enought, flash manual and find info aboud a sandboxType. There is a lot of info.

Live Preview

franto.com