New answers tagged flash
Double submission is vulnerable to man-in-the-middle attacks when using HTTPS, because of usual same origin policy restrictions do not apply to cookies: an attacker can set a token through HTTP (by luring the victim to visiting an HTTP link and forging a response) which will be sent to the server through HTTPS.
Ubuntu Linux makes it easy to install Flash as soon as you encounter it. Things have changed since. Nowadays, even when it is installed, Flash is disabled by default. If you are talking only about Flash player plugin and security then you need to know it is no longer recommended (Facebook calls for end to Flash as Firefox blocks it over hacking ...
Top 50 recent answers are included