Tag Info

New answers tagged

2

When you go to http://get.adobe.com/flashplayer/, it will forward you to http://get.adobe.com/**/flashplayer/ where ** is the two-letter code of the preferred language according to your browsers headers. You can then change this from http to https to get the encrypted version, which will have a https link to the latest flash installer. By the way: When you ...


-2

Why does the Adobe download site need to use SSL? Do you need the flash update to be encrypted? SSL doesn't make a site secure. You can download all kinds of malware and exploited content from an SSL connection, it's just that other people won't be able to see it. If there is no sensitive information to be obtained by downloading a flash player update from ...


2

I have read your clarification. You might find a compelling argument in the following paper: In general, where the party who is in a position to protect a system is not the party who would suffer the results of security failure, then problems may be expected. [1] I.e. the "there is no need to invest in security for us"-argument. You might even pull ...


2

What you are describing sounds a bit like the Apple student discount. In order to purchase something with a student discount you have to log in from your university network. Edit: The reason for them to do this is that they do not want this to be available for everyone (captain obvious to the rescue). I think they used the university network to identify ...


3

Protections are in place to combat risks. If the risks are low, then the protections can be low. Think about a forum site. There might be no reason for the site to use "strong protection", because all you really want to do is to be able to identify who is contributing. It could be determined that the site needs very weak protections in that case. The ...


1

Being disconnected results in an annoyance for legitimate users if we make a mistake coding the "misbehavior detection" With proper code review, mistakes like these can be avoided. Killing the client eliminates the need for "clean up" response code. Although it is important to "kill" a malicious client in order to prevent further issues, personally, ...



Top 50 recent answers are included