It might soon be curtains for Adobe Flash Player. Yesterday, Firefox announced that all versions of Adobe Flash would be blocked from its browsers for security reasons. This announcement came hot on the heels of Facebook’s chief security officer calling for a kill date. Apple, notably, has frozen Adobe out of its app development since 2010.
It is time for Adobe to announce the end-of-life date for Flash and to ask the browsers to set killbits on the same day.
— Alex Stamos (@alexstamos) July 12, 2015
The problem stems from the software’s myriad insecurities due to old code that hackers can exploit across Adobe products. So how did this erstwhile basis of apps and video-streaming fall so far out of favor? Let’s take a walk (of shame) down memory lane.
Adobe Flash accounts for 7 percent of known Web plug-in vulnerabilities in Symantec’s 2009 Security Threat Report. (Adobe Reader accounts for 15 percent.)
April 8-9, 2010
Reports trickle in that Apple has locked out Adobe’s Flash-to-iPhone compiler (basically a way to create iPhone apps using Adobe’s Flash CS5 software) from the iPhone 4 S. In Apple’s agreement with app developers, it states: “Applications may only use Documented APIs in the manner prescribed by Apple and must not use or call any private APIs.” Adobe Flash’s Flash-to-iPhone compiler API is built using Flash CS5, a private API that Apple can’t fiddle with. Uh oh.
April 20, 2010
Adobe officially abandons plans to bring Adobe Flash to Apple’s iPhone and iPad. Years of bickering between the two companies ensue.
April 29, 2010
Apple CEO Steve Jobs writes a now-infamous 1,600-word explanation of 6 reasons why Apple products such as iPhones, iPads, and iPods will no longer support Flash, entitled “Thoughts on Flash.” The most important for Jobs was the undesirability of having third-party layers of software between the developer and the platform, which chains developers to libraries and tools that they have to wait for third parties to update, slowing down the development process.
Adobe shelves its Flash software for mobile devices altogether and shifts to HTML5, the more widely-accepted standard for displaying content on the Web. This doesn’t solve much though. As CNN Money notes two years later, Adobe’s source code is so old in comparison to everything else that this is a Band-Aid on a bullet wound.
June 28, 2012
Adobe announces that the Android 4.1 update will not support Adobe Flash by default. It was removed from the Google Play Store on August 15, 2012, though devices that already had it downloaded can continue to use it.
Hackers gain access to the names, encrypted passwords, and credit card information of 3 billion Adobe Flash users. This was achieved through the theft of source code for Adobe Acrobat, ColdFusion, ColdFusion Builder, and other Adobe products. Turns out, Adobe’s core code was so old that knowing just a few lines of it was enough to access the ecosystem.
October 28, 2014
HTML5 is officially endorsed as a stable recommendation by the W3C Committee, 17 years after the last update in 1997. It’s superior to Flash because it has mobile capabilities, a key area where Steve Jobs felt that Flash fell short.
July 13, 2015
Firefox’s support lead Mark Schmidt announces on Twitter that Flash is blocked by default on Firefox browsers due to two unpatched vulnerabilities — vulnerabilities that are unknown to the vendor (in this case, Firefox) and are hence easier to exploit by hackers.
— Mark Schmidt (@MarkSchmidty) July 14, 2015
“It’s our policy to block vulnerable plugins. What made this block different was that we did it before Adobe made an update available,” Schmid told Digiday. Yesterday, Adobe updated Flash to fix the vulnerabilities, but Schmidt says that the decision was made before the updates were posted. “The public nature of the vulnerabilities, thanks to the Hacking Team dump, were a factor in the decision to block before an update.”
In the end, abandoning Flash might be Adobe’s opportunity to finally embrace the possibilities of mobile and reestablish trust with users. As CNN Money noted back in 2011, Adobe makes no money from the technology when a video is streamed or someone plays a game using Flash technology. Furthermore, as Mary Meeker noted in her 2015 Internet Trends report at Recode’s Code Conference in June 2015, mobile penetration is at 73 percent globally, so a more mobile-friendly technology such as HTML5 would be preferable for web developers and users.
Whatever happens, Schmidt is pleased that this long-standing issue is being discussed. “I’m glad to see the tech community talking about the possibility of an EOL [end of life] date for Flash. I think that’s a good thing,” Mark Schmidt told Digiday.
Green Mountain Coffee Roasters partners with Martha Stewart to retool its social media strategy
In order to get the retain their current consumers while also reaching new, younger consumers, Green Mountain Coffee Roasters has worked to create more easily digestible content.
How Estonia adjusted its national branding strategy in response to the war in Ukraine
Following Russia’s invasion of Ukraine, Brand Estonia has officially added a fourth pillar to its national brand: the country’s embrace of democratic values. The purpose of the added messagin
Surging photo-sharing app BeReal has brands like Chipotle, e.l.f. Cosmetics rushing to understand platform’s appeal with Gen Z
As social media newcomer BeReal gains traction, marketers start discussions about where and if brands belong on BeReal.
SponsoredWhy online search is foundational for a post-cookies environment
Derick Jaros, head of industry, commerce, Yext If there’s one definite thing about the past two years, it’s that consumer behavior changed significantly throughout the pandemic. From the shift to online-only life in early 2020 to the frantic Googling for new hours, policies, and stock updates in the first phase of reopening, consumers turned to […]
The Rundown: Meta to put new ads all over Facebook and Instagram, including on user profiles
Meta is launching new ad formats this quarter, which are hoping to capitalize off of readers' appetite for discovery.
Member ExclusiveDigiday+ Research: Facebook, Instagram, YouTube valued by brands and agencies, but ad spend lags — especially on TikTok
Brands and agencies are in alignment in terms of how confident they are that social media drives marketing success, but a significant gap exits between how they allocate marketing budgets on those platforms.