<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
<tt>On 07/06/2011 09:57, Julian Field wrote:</tt>
<blockquote cite="mid:4DEDE813.4090302@ecs.soton.ac.uk" type="cite">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<tt>There has been yet another update to the Adobe Flash Player
that many websites use (all those stupid animated adverts
mostly).<br>
</tt></blockquote>
<tt><br>
On that basis, there is a *lot* to be said for blocking Flash
content unless you explicitly click to see/whitelist it (e.g.
YouTube), like reducing the chances you'll ever even let a
malicious animation load, and stopping badly-written banner ads
from turning all your battery life into heat.<br>
<br>
For Firefox, there's FlashBlock, or NoScript performs a superset
of that if you want to squash JavaScript and other plugins by
default as well:<br>
<br>
<a class="moz-txt-link-freetext" href="https://addons.mozilla.org/en-US/firefox/addon/flashblock/">https://addons.mozilla.org/en-US/firefox/addon/flashblock/</a><br>
<a class="moz-txt-link-freetext" href="https://addons.mozilla.org/en-US/firefox/addon/noscript/">https://addons.mozilla.org/en-US/firefox/addon/noscript/</a><br>
<br>
For Safari, there appears to be ClickToFlash, which also
special-cases YouTube and some other video sites to use QuickTime
instead(!):<br>
<br>
<a class="moz-txt-link-freetext" href="https://extensions.apple.com/">https://extensions.apple.com/</a> (It's all JavaScript-y, so you'll
have to search-in-page)<br>
<a class="moz-txt-link-freetext" href="http://clicktoflash.com/">http://clicktoflash.com/</a> (Its own website, but uses a pkg
installer and manual "uninstall" rather than the Safari extensions
UI)<br>
<br>
I haven't used it extensively but a quick test on Hackintosh VM
seemed to work and it appears you can turn off the YouTube
QuickTime-ifying if the interface replacement is unwelcome or YT
changes break it.<br>
<br>
For Opera, the capability is built in since version 10.5 or so,
and is buried under Menu -> Settings -> Preferences ->
Advanced -> Content -> "Enable plug-ins only on demand",
because all their UI designers are drunk. This does at least also
catch _everything_, including Java Applets, because chances are
that unless you're marking CM143 coursework Java is just sitting
around as another angle of attack for malware.<br>
<br>
-- <br>
| Philip Boulain PhD student | ,-. | We are not here to
give |<br>
| IAM, ECS, Uni of Southampton | / | users what they want. We
are |<br>
| <a class="moz-txt-link-freetext" href="http://zepler.net/~lionsphil">http://zepler.net/~lionsphil</a> | -' `-' | here to spread freedom.
-RMS |<br>
</tt>
</body>
</html>