Snow Leopard ships with old version of Flash - great for hackers, not so much for the rest of us
By Joseph L. Flatley 
posted Sep 3rd 2009 2:31PM
posted Sep 3rd 2009 2:31PM
As we've seen, for many people the migration to Snow Leopard has been eventful (to say the least). Even if you've been spared most of the growing pains, you'll want to make note of this next item: According to the kids at Adobe, the initial release of Mac OS X 10.6 includes an earlier version of Adobe Flash Player (10.0.23.1), necessitating an upgrade to 10.0.32.18 if you want to take advantage of the enhanced security the latter provides. What's more, even if your plug-in was up-to-date, an upgrade to Snow Leopard will downgrade your Flash Player version -- so much for auto-magically downloading the most recent updates when you install the OS, eh? Our feeling is this: if you're including Flash Player in the OS, you'd better update that as well. As Daily Tech points out, Adobe products (especially Flash) are a favorite of hackers and malcontents everywhere, so if you're serious about security you'll want to get your hands on the update ASAP. And as always, the read link is a terrific place to start.
[Via Daily Tech]
[Via Daily Tech]
that's why I'm waiting for october 11
22
I have perhaps a bit different reasons, but agree with the date ($50 backorder on Amazon baby)
I got the wrong end of this, I thought they were talking about Adobe Flash, such as pictured, not the player!
Adobe requires you gain a license to distribute the flash player with your software. One of the agreements you sign for that license is that you will only distribute the latest version of the player. Apple is in violation of their flash player distribution license.
Perhaps if Adobe's software wasn't utter shite this wouldn't be an issue.
No,
If perhaps apple would include the update or just not include it all so the users have to go get the newest version on their one.
Now hackers are waiting for the obvious hoards of user who will not know to upgrade and attack them.
Apple's attitude towards Security is kind of disturbing.
This reminds me of that Java exploit a month or so ago that was all ready and fixed on Sun's end, but ended up held back on OSX due to Apple's lackadaisical security philosophies and draconian control over their platform.
Look, I hate Apple like everyone does, but this is a stupid argument.
Apple can't include an update that is released after their own RTM, and the first thing any Adobe SW does, is check for updates.
By default.
The only way that this is a problem for Apple, is if you want it to be.
Plus, do you really want to argue that Flash isn't garbage SW?
If it WEREN'T utter shite...
Bitching at Apple about this is stupid. There are plenty of other things to complain to Apple about, but this isn't one.
And the other "pains" are typically the result of developers who've dragged ass on bringing their apps up to date for years. One example is all of the software that still demands Rosetta (the PowerPC emulation for software that predates Apple's switch to Intel). Come on, the Intel switchover was YEARS ago. If an app still needs Rosetta, it's probably not being maintained anymore. Move on.
Sorry, but it's commonly accepted that Flash is currently bad software, making this a present tense hypothetical.
As such, "wasn't" is acceptable.
Jon, while you make a good point about Apple not having access to the new Flash version, there's no reason I can see why the installation has to overwrite the current version.
"Sorry, but it's commonly accepted that Flash is currently bad software, making this a present tense hypothetical. As such, "wasn't" is acceptable."
Incorrect. You're right in saying that this statement is hypothetical or contrary to fact, but that's exactly when the subjunctive is used. From Wikipedia:
To express a hypothesis
The past subjunctive is used after the conjunction if in a contrary-to-fact and contrary-to-possibility protasis. For example:
* If I were a millionaire, I would buy a sports car.
* If he had a car with him, he could drive us there.
* If I were a rich man...
I'm sorry, what's the problem here? I updated to the newest flash version right after installing Snow Leopard and everything is just fine. I suppose if you don't know how to update it this would be an issue, but then again, just about every other PC I've seen this summer has had a failed update little red 'x' on its antivirus software icon, and needed a lot more work to fix than this.
Click link, install, done: http://get.adobe.com/flashplayer/thankyou/?installer=Flash_Player_10_for_Mac_OS_X
@ jon
"Look, I hate Apple like everyone does, but this is a stupid argument. "
How sad that you think "everyone" consists purely of embittered MS fanboys. It's so amusing to see your kind hating on successful enterprises while adhering to the ones like Microsoft that have no idea how to compete in the market place.
A few years ago (around the Win2K timeframe) Microsoft shipped a version of IE which would install an older version of Flash (I am looking for a link, but a search for "Flash Vulnerability IE" gives over a million hits). There was outrage over Microsoft doing such a thing, that they did not care about security, and were putting users at risk. Yes, it was stupid, and MS got the criticism they deserved. MS did not ship Flash in the IE installer after that incident.
Apple does the same thing, and we have some of the usual Apple people saying it is not a problem, people are not at risk, and no outrage at Apple.
Are you freakin' kidding me? OSX is "the world's most advanced operating system" and they can't even bundle the newest version of flash??
Actually, a google search for "Flash Vulnerability IE" only gives exactly one result on google, leading to this page, your comment.
Congrats! You turned a "No results found" Google page into a page with result(s).
Mio, I put quotes around what I wrote to seperate those words out from the rest of my words, it was not intended to search for the exact phrase.
wow, this is the latest, most secure OS from apple...then this must be a feature, not a bug
its an iBackdoor for all your friends to join in the party....duh!
Huh? It was a bug in Adobe's software. Sure, Snow Leopard should have included the latest flash, but this doesn't have anything to do with the security of OS X at all.
@Mark: In reality, its Apple at fault here. As kjb434 pointed out, Apple should have included the latest released version OR not include it at all (as Microsoft). It opens up the OS to attacks due to this, while using Flash as the medium for it.
iBackdoor ... sounds so wrong.
Apple should have included the latest version or just left it out entirely? Apple did include the "latest" version when the OS was locked down for gold master status. The problem is, Adobe released a newer version when Snow Leopard code was being pressed to millions of DVDs.
Guess what. Windows 7 will also have software that isn't the "latest" when it hits shelves in October. No big deal.
Flash checks for updates anyhow, so all it will take is people to browse to a flash enabled site, see that an update is available, and download it.
See, there is this real world out there, made up of physical things. It takes time for these physical things to be made. Amazing!
"most people's migration to Snow Leopard has been eventful"
most....
Really?
I know there have been some issues and this flash story is disappointing but come on.
Indeed. This is a minor issue. Apple have apparently just started seeding 10.6.1. No doubt they'll update Flash and this issue will be over. If it does become an issue, Apple can fix it easily via software update (considering the fixed software is already available).
The only real issue is that it overwrites a newer version of Flash. That's sloppy on Apple's part, but let's not blow it out of proportion.
Apple aren't perfect (far from it), but this is seriously minor; it's like a news post that Barack Obama picked his nose.
Silverlight > Flash
i wish flash would go away...FOREVER
I wish there would be finally agreement on media format in web browsers, we would not need Flash for majority of the sites, why in the heck do we need flash to play video in the first place?
@JimboJones: Like HTML 5?
Mark, VIDEO format is NOT part of HTML 5 (tags are not not actual standard format), OGG was removed from the protocol
HTML5 specifies that there will be a tag.
Browsers (and vendors) are currently arguing what the standard video format should be that that tag will use.
Mozilla and Opera are supporting the use of OGG.
Apple is pushing for H.264.
Microsoft is still asleep.
See: http://en.wikipedia.org/wiki/Ogg_controversy
Point still stands. With HTML 5, Flash isn't necessary.
i still think HTML is worthless and webpages should be written in some type of universal compiled language. HTML was developed back when the idea of submitting compiled software over networks quickly was a dream. Now a compiled webpage (like semi-compiled flash or java apps, thought they are still interpreted to an externt) under 15 megs can download as quickly as a html webpage did 5 years ago, and most compiled webpages would be around 100k-3megs, which would load just as fast as a normal webpage, but, since it was compiled, would look the same on every computer, regardless of OS or browser . Yes it would make virus distrubition easier, but html (espeically html 5) is attempting to emulate compiled code, while still being a markup language, its pointless, its slow, and its a pain in the ass to have to code it 3 times to make sure it looks the same for everyone. I am so tired of legacy BS, its time to move on.
@Grammer Delinquent
"under 15 megs can download as quickly as a html webpage did 5 years ago"
If you are on a high speed connection that you share with absolutely nobody else. Get about 4 or 5 actively browsing pulling down 15 meg webpages and your web browsing experience will jump back to what it was like 15 years ago.
Mark you don't get it. HTML5 does not specify the standard video format. That said, if you want to play video across any browser supporting HTML5 (only HTML5 standard), then you need FLASH
Upgrade issues, lax security, built in anti-spyware....
With so many people switching to Mac, Apple wants the ex-Windows users to feel right at home. If everything "just worked", it'd be too big of a culture shock for them.
Hmm... you're bashing both Mac and Windows.... Don't know where to go with this one; Linux troll?
Mark, hes promoting beOS obviously
the funny thing is i havnt used spyware or antivirus programs in over 4 years and never get viruses or spyware...
and i also cant think of one thing that hasnt 'worked' on my computer.
advertising is great, isnt it?
Going with the "if I don't know about it, it must not be there philosophy"? That always works well.
How do you know your computer isn't infected? Maybe all your friends have dropped you into their spam filter because they are tired of the virus-laden emails that your computer keeps cranking out to them... that you don't know about.
Peddling this no-virus software philosophy is like telling teenagers that "safe sex" is BS, since you never got HIV and you haven't been to the doctor in 4 years. Way to go.
Windows sucks.
Mac is gay.
Linux is not user-friendly.
Chrome doesn't exist.
beOS is junk.
BSD is more like BSDumb.
OS/2 is trash.
Amiga is dead.
Anyone want to recommend a good operating system?
The first point release is going to be very important.
Sucks, not user friendly, non existent, junk, dumb, trash and dead.
Think you're better of with the Gay one, that's unless your a homophobic.
tmarks you just don't know how to use a computer, I use Windows and OSX. Or you constantly surf porn and warez websites. I'ved used my computer for over 10 years with no antivirus and distribute tons of applications I created to people on all platforms - linux, windows, iphone and not once ever was informed I have a virus. I run the occasional antivirus scan to make sure but why bother with the bloat and slow down if you know how to use a computer?
the majority of people are like tmarks, they dont know how to use a computer and so they want to yell at people that do. learn to use tools properly and you wont need to run 30,000 applications to make yourself feel safe.
Silverlight is the future!
Thank God the world is ending in 2012 then!
"As we've seen, most people's migration to Snow Leopard has been eventful "
...Except that even the link you included says quite differently. Fewer than 25% reported problems of any kind--in a self-selecting Internet poll with automatic bias toward people with problems.
Try harder to troll next time. At least be more subtle.
Actually, the three selections that indicate problems add up to 30.5% if my math is correct.
While this isn't "most" of the adopters, it is the majority.
Ughhh...here comes all the bullshit...