-1

I kinda addicted to Little Big Snake, an online game that requires Flash. I'm trying to find a secure way to play this game on Ubuntu using Chrome.

I tried Firejail but the game is very laggy with it. The only thing I do for now to make it more secure is enable AppArmor. I hope you have better suggestions for me. For instance, can Incognito mode in Chrome mitigate zero-day attacks on Flash player?

  • What do you mean by "a secure way"? What are the threats that you are afraid of? – Tom K. Apr 27 '18 at 11:13
  • 1
    if the game's not malicious, what are you concerned about? isn't flash click to run in chrome? – dandavis Apr 27 '18 at 12:43
  • "what are you concerned about?" flash zero day attacks – justlinx69 Apr 27 '18 at 13:36
1

"btw Incognito mode in chrome can mitigate zero-day attacks on flash player?"

No, no way. No. I have no idea how you figured that.

As flash is notoriously insecure, there is not much you can do other than sequestering the browser from the PC. Your best bet is probably virtualization. Either run a VM, or use Qubes, on OS that does that for you. Alternatively, you can try using OS run from a USB memory stick, that can not write to your HDD such as Tails. Without being able to read form/write to your disk, there is nothing very harmful it can do.

  • "No, no way. No. I have no idea how you figured that." i thought maybe it can exit the attacker session or delete any files he try to upload on my computer, after i exit incognito mode it delete all files – justlinx69 Apr 27 '18 at 10:23
  • @justlinx69 Sorry if too dramatic, but that sound as a very dangerous misconception. Believing something is secure when it is not is a terrible thing, so if you heard/read that somewhere, you may want to point it out as being incorrect. – Peter Harmann Apr 27 '18 at 10:28
  • 2
    @justlinx69 Incognito deletes cookies and history, but not downloaded files. And more importantly, flash vulnerabilities can allow viruses to bypass chrome altogether, so even if it deleted all files normally, it would not delete the virus as the virus would be able to bypass that. – Peter Harmann Apr 27 '18 at 10:29
  • yeah i just read again the google chrome help article. i just kind a tired of trying make it more secure after experiment with docker and firejail – justlinx69 Apr 27 '18 at 10:31
  • @justlinx69 Well, if you trust the developer of the game and the site it is hosted on (+ use https), than it may not be as insecure to just go for it and play the game without taking paranoid precautions :) Of course as long as it is a personal PC with nothing too important on it. – Peter Harmann Apr 27 '18 at 10:43

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.