Tag Info

New answers tagged


In addition to WillS' excellent answer, a couple more differences that affect security: Flash is a product, while HTML5/Javascript is a specification. With a product (and especially a closed-source one), you always depend on the vendor to play a game of whack-a-mole (which Adobe is doing admirably, but long term it is a losing battle). A specification can ...


In theory, if all servers were perfectly secure (impossible) and trustworthy (not true), neither one would be more "secure" than the other - mainly because the developer(s) of the website are in full control of the content of the site. Since Flash and the JS is served to clients, the server would have to serve malicious content to the end user in order for ...


In some cases, antivirus scanners can have false positives based on a similar appearance of some of the code in the files you are scanning. You can rule out a false positive by scanning the files with another antivirus utility. For example, a trial version of ESET's NOD32. Please try scanning with another AV solution and let us know the results.


In most cases flash content is served with a distinct content-type like application/x-shockwave-flash. Proxies like squid can log this content-type additionally to the URL and I'm sure lots of the better firewalls can log this too. Note that simple packet filtering firewalls (iptables etc) will not be able to do this. Since I doubt that you will replace ...

Top 50 recent answers are included