0

I kinda addicted to Little Big Snake, an online game that requires Flash. I'm trying to find a secure way to play this game on Ubuntu using Chrome.

I tried Firejail but the game is very laggy with it. The only thing I do for now to make it more secure is enable AppArmor. I hope you have better suggestions for me. For instance, can Incognito mode in Chrome mitigate zero-day attacks on Flash player?

Improve this question
3
  • What do you mean by "a secure way"? What are the threats that you are afraid of?
    – Tom K.
    Apr 27, 2018 at 11:13
  • 1
    if the game's not malicious, what are you concerned about? isn't flash click to run in chrome?
    – dandavis
    Apr 27, 2018 at 12:43
  • "what are you concerned about?" flash zero day attacks
    – justlinx69
    Apr 27, 2018 at 13:36

1 Answer 1

Reset to default
2

"btw Incognito mode in chrome can mitigate zero-day attacks on flash player?"

No, no way. No. I have no idea how you figured that.

As flash is notoriously insecure, there is not much you can do other than sequestering the browser from the PC. Your best bet is probably virtualization. Either run a VM, or use Qubes, on OS that does that for you. Alternatively, you can try using OS run from a USB memory stick, that can not write to your HDD such as Tails. Without being able to read form/write to your disk, there is nothing very harmful it can do.

Improve this answer
6
  • "No, no way. No. I have no idea how you figured that." i thought maybe it can exit the attacker session or delete any files he try to upload on my computer, after i exit incognito mode it delete all files
    – justlinx69
    Apr 27, 2018 at 10:23
  • @justlinx69 Sorry if too dramatic, but that sound as a very dangerous misconception. Believing something is secure when it is not is a terrible thing, so if you heard/read that somewhere, you may want to point it out as being incorrect.
    – Peter Harmann
    Apr 27, 2018 at 10:28
  • 2
    @justlinx69 Incognito deletes cookies and history, but not downloaded files. And more importantly, flash vulnerabilities can allow viruses to bypass chrome altogether, so even if it deleted all files normally, it would not delete the virus as the virus would be able to bypass that.
    – Peter Harmann
    Apr 27, 2018 at 10:29
  • yeah i just read again the google chrome help article. i just kind a tired of trying make it more secure after experiment with docker and firejail
    – justlinx69
    Apr 27, 2018 at 10:31
  • @justlinx69 Well, if you trust the developer of the game and the site it is hosted on (+ use https), than it may not be as insecure to just go for it and play the game without taking paranoid precautions :) Of course as long as it is a personal PC with nothing too important on it.
    – Peter Harmann
    Apr 27, 2018 at 10:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .