<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Komentáre k Flash8: Security problems &#8211; still no solution</title>
	<atom:link href="http://franto.com/flash8-security-problems-still-no-solution/feed/" rel="self" type="application/rss+xml" />
	<link>http://franto.com/flash8-security-problems-still-no-solution/</link>
	<description></description>
	<lastBuildDate>Wed, 17 Aug 2011 07:37:55 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.3</generator>
	<item>
		<title>Od: michal</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1942</link>
		<dc:creator>michal</dc:creator>
		<pubDate>Wed, 15 Mar 2006 08:19:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1942</guid>
		<description>Try this ;) Maybe could help.
&lt;a href=&quot;http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager04.html&quot; rel=&quot;nofollow&quot;&gt;http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager04.html&lt;/a&gt;

And if not enought, flash manual and find info aboud a sandboxType. There is a lot of info.</description>
		<content:encoded><![CDATA[<p>Try this <img src='http://franto.com/blog2/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' />  Maybe could help.<br />
<a href="http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager04.html" rel="nofollow">http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager04.html</a></p>
<p>And if not enought, flash manual and find info aboud a sandboxType. There is a lot of info.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: jot</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1941</link>
		<dc:creator>jot</dc:creator>
		<pubDate>Fri, 20 Jan 2006 08:29:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1941</guid>
		<description>quote: Macromedia is aware of the impact these changes have on our customers and we do not undertake such projects lightly. We offer our sincere apologies if you find yourself affected.

=/</description>
		<content:encoded><![CDATA[<p>quote: Macromedia is aware of the impact these changes have on our customers and we do not undertake such projects lightly. We offer our sincere apologies if you find yourself affected.</p>
<p>=/</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: Jan Guichelaar</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1940</link>
		<dc:creator>Jan Guichelaar</dc:creator>
		<pubDate>Fri, 13 Jan 2006 08:37:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1940</guid>
		<description>Hi all

I encountered the same problem last week.
We made a website for a client with flash8, html, ajax, and javascript. It works all fine online.

Now the client is so satisfied, he wants the whole site on a cdrom.
To run the site from cdrom we&#039;re entering the flash 8 security problem zone. Loading flv&#039;s is not a problem, but calling javascript from flash gives the security alert from flash, wich guides you to the &#039;ONLINE&#039; security manager. The whole purpose of putting the site on a cdrom is to be able to view it without an internet connection.

We came up with a (for me) very nice solution. We made an installer wich installs the complete site and content on the users computer and puts the right .cfg files in the right folders.

But now the client doesn;t trust installers .......so.. back to the drawing board.

It seems flash 8 is made for online use, not for offline use.

to MM: do something about this!

jan</description>
		<content:encoded><![CDATA[<p>Hi all</p>
<p>I encountered the same problem last week.<br />
We made a website for a client with flash8, html, ajax, and javascript. It works all fine online.</p>
<p>Now the client is so satisfied, he wants the whole site on a cdrom.<br />
To run the site from cdrom we&#8217;re entering the flash 8 security problem zone. Loading flv&#8217;s is not a problem, but calling javascript from flash gives the security alert from flash, wich guides you to the &#8216;ONLINE&#8217; security manager. The whole purpose of putting the site on a cdrom is to be able to view it without an internet connection.</p>
<p>We came up with a (for me) very nice solution. We made an installer wich installs the complete site and content on the users computer and puts the right .cfg files in the right folders.</p>
<p>But now the client doesn;t trust installers &#8230;&#8230;.so.. back to the drawing board.</p>
<p>It seems flash 8 is made for online use, not for offline use.</p>
<p>to MM: do something about this!</p>
<p>jan</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: Campbell Anderson</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1939</link>
		<dc:creator>Campbell Anderson</dc:creator>
		<pubDate>Mon, 09 Jan 2006 22:18:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1939</guid>
		<description>I can make you a small app that loads the top level swf (movie player) from the web and allows access to the harddrive. I have done it before and have the remanants which works....but you have to have .net on the computer (sorry dont know c++ well enough to do it in that)
would that help? Basically you will have to wrap it to get around the security.........

Campbell</description>
		<content:encoded><![CDATA[<p>I can make you a small app that loads the top level swf (movie player) from the web and allows access to the harddrive. I have done it before and have the remanants which works&#8230;.but you have to have .net on the computer (sorry dont know c++ well enough to do it in that)<br />
would that help? Basically you will have to wrap it to get around the security&#8230;&#8230;&#8230;</p>
<p>Campbell</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: Chris Benjaminsen</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1938</link>
		<dc:creator>Chris Benjaminsen</dc:creator>
		<pubDate>Tue, 13 Dec 2005 00:31:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1938</guid>
		<description>I always prefered just to slam a webserver on the kiosk maschine, say an apache on *nix computers, or just the personal webserver for windows kioks.

Then just create a entry in your hosts file that points localhost.domain.com to the local webserver and use that from your hostfile.

Ofcouse this is not a perfect solution if you want the users to install some files on there computer to minimize download time. For that there is nothing else to do then config the cache settings on the webserver as good as possible.

/Chris</description>
		<content:encoded><![CDATA[<p>I always prefered just to slam a webserver on the kiosk maschine, say an apache on *nix computers, or just the personal webserver for windows kioks.</p>
<p>Then just create a entry in your hosts file that points localhost.domain.com to the local webserver and use that from your hostfile.</p>
<p>Ofcouse this is not a perfect solution if you want the users to install some files on there computer to minimize download time. For that there is nothing else to do then config the cache settings on the webserver as good as possible.</p>
<p>/Chris</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: Administrator</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1937</link>
		<dc:creator>Administrator</dc:creator>
		<pubDate>Mon, 12 Dec 2005 20:52:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1937</guid>
		<description>John, sure i have small test application, which I&#039;ve already sent to Gilles Drieu (I spoke with him at Spark conference in Amsterdam), he got it, I will upload it here tommorow, i got it only in office, not home.

But I have solution with HTTP server, but I want solution that should work normally as is described by macromedia....

And i do not know any flash coder, which done this, i spoke with many flash coders over the world, no one could do this, so if you know someone, who did it, please, can you give me contact to him?

Thanks many times</description>
		<content:encoded><![CDATA[<p>John, sure i have small test application, which I&#8217;ve already sent to Gilles Drieu (I spoke with him at Spark conference in Amsterdam), he got it, I will upload it here tommorow, i got it only in office, not home.</p>
<p>But I have solution with HTTP server, but I want solution that should work normally as is described by macromedia&#8230;.</p>
<p>And i do not know any flash coder, which done this, i spoke with many flash coders over the world, no one could do this, so if you know someone, who did it, please, can you give me contact to him?</p>
<p>Thanks many times</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: John Dowdell</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1936</link>
		<dc:creator>John Dowdell</dc:creator>
		<pubDate>Mon, 12 Dec 2005 18:33:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1936</guid>
		<description>&lt;em&gt;&quot;... given that all the methods Macromedia list have been tested and do not seem to work...&quot;&lt;/em&gt;

This is where I get a little unsure, because I know that people generally *do* use the methods described in these documents to good effect:
http://www.macromedia.com/devnet/flash/articles/fplayer8_security.html
http://www.macromedia.com/go/4c093f20

I believe you&#039;re seeing what you&#039;re seeing, but I&#039;m not sure yet how others can make it happen too. That&#039;s why it&#039;s hard for me to reply directly.

hmm... maybe one way to get to the bottom of this would be to see if you can use the above methods in a new, smaller, simpler test project... that would let us focus more directly on the steps. Do you know yet which of the four types of sandboxes you&#039;re in?
http://www.macromedia.com/devnet/flash/articles/fplayer8_security_03.html

jd/adobe</description>
		<content:encoded><![CDATA[<p><em>&#8220;&#8230; given that all the methods Macromedia list have been tested and do not seem to work&#8230;&#8221;</em></p>
<p>This is where I get a little unsure, because I know that people generally *do* use the methods described in these documents to good effect:<br />
<a href="http://www.macromedia.com/devnet/flash/articles/fplayer8_security.html" rel="nofollow">http://www.macromedia.com/devnet/flash/articles/fplayer8_security.html</a><br />
<a href="http://www.macromedia.com/go/4c093f20" rel="nofollow">http://www.macromedia.com/go/4c093f20</a></p>
<p>I believe you&#8217;re seeing what you&#8217;re seeing, but I&#8217;m not sure yet how others can make it happen too. That&#8217;s why it&#8217;s hard for me to reply directly.</p>
<p>hmm&#8230; maybe one way to get to the bottom of this would be to see if you can use the above methods in a new, smaller, simpler test project&#8230; that would let us focus more directly on the steps. Do you know yet which of the four types of sandboxes you&#8217;re in?<br />
<a href="http://www.macromedia.com/devnet/flash/articles/fplayer8_security_03.html" rel="nofollow">http://www.macromedia.com/devnet/flash/articles/fplayer8_security_03.html</a></p>
<p>jd/adobe</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: Administrator</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1935</link>
		<dc:creator>Administrator</dc:creator>
		<pubDate>Mon, 12 Dec 2005 15:55:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1935</guid>
		<description>i&#039;ve got solution, but now it&#039;s working only in Firefox, not IE :(

I will write about it soon, must find out why it doesnt work for IE, but it&#039;s base on simple HTTP server on localhost...so you need not to load file from file:///c:/test.swf, but instead http://localhost:8080/test.swf

This is advice from Theodor Patrick, and source of simple HTTP server will be in IFBIN (IFBIN works on this solution)</description>
		<content:encoded><![CDATA[<p>i&#8217;ve got solution, but now it&#8217;s working only in Firefox, not IE <img src='http://franto.com/blog2/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /> </p>
<p>I will write about it soon, must find out why it doesnt work for IE, but it&#8217;s base on simple HTTP server on localhost&#8230;so you need not to load file from file:///c:/test.swf, but instead <a href="http://localhost:8080/test.swf" rel="nofollow">http://localhost:8080/test.swf</a></p>
<p>This is advice from Theodor Patrick, and source of simple HTTP server will be in IFBIN (IFBIN works on this solution)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: JesterXL</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1934</link>
		<dc:creator>JesterXL</dc:creator>
		<pubDate>Mon, 12 Dec 2005 15:30:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1934</guid>
		<description>Nothing helpful to add, but just glad you are keeping us updated on how this pans out.</description>
		<content:encoded><![CDATA[<p>Nothing helpful to add, but just glad you are keeping us updated on how this pans out.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Od: hey</title>
		<link>http://franto.com/flash8-security-problems-still-no-solution/comment-page-1/#comment-1933</link>
		<dc:creator>hey</dc:creator>
		<pubDate>Mon, 12 Dec 2005 15:30:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.franto.com/blog2/?p=186#comment-1933</guid>
		<description>This is a big step back for flash 8 la ocho.  Is breaking my 8 ballz.</description>
		<content:encoded><![CDATA[<p>This is a big step back for flash 8 la ocho.  Is breaking my 8 ballz.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

