Flash8: Security problems - still no solution

Monday, December 12th, 2005

Hey everybody, i got still no solution for my problem. Look at my original post: Flash8: Security problems.

Here is description of problem from g.wygonik (Seems better description of my problem):

john - i think the single line question would be:

“What does a Flash developer have to do to make a Flash movie that runs in the browser from the net access local assets, given that all the methods Macromedia list have been tested and do not seem to work?”

and then, perhaps:

“Can Macromedia please make some sort of document or post that clearly states how to do this, instead of having to read through multiple web sites, PDF white papers, and several blog posts?”

whew! :-)
g.

If anyone has solution for this, pleeeeease let me know, I need this solution ASAP for my company. It’s real big problem. We bought Flash 8, but can’t use it, because of such security reasons. That’s no good.

AddThis Feed Button

This is some text prior to the author information. You can change this text from the admin section of WP-Gravatar  I'm living in Bratislava, Slovakia. I'm Senior Flex, AIR Developer for my own company Flexets. Read more from this author

tagged under:

ABOUT THIS AUTHOR


Franto
I'm living in Bratislava, Slovakia. I'm Senior Flex, AIR Developer for my own company Flexets.

Get a Trackback link

16 Comments


  1. Cedric
    • Visit Site
    December 12th, 2005

    Macromedia is not keen on finding solutions given problems they’d setup :-) really!

    but, Flash’s users are keen on that … don’t hold to the mother, she’s a bioooaaatch…

    Like with SHARED ASSETS (still laughing), the solutions are out there, but not on Macromedia’s side (nor site) … actually, they have some weird way of finding solutions for the tools THEY did develop …

    sorry for my lack of positive comments … but don’t wait for MM to come up with a solution ..

    are we gonna make it ???


  2. cosmin
    • Visit Site
    December 12th, 2005

    may no longer load any content (SWF, HTML, PNG, and so on) from local paths.”>

    I think that’s all folks.
    The user would have to dload the swf and open it from a local path in order for that swf to be able to read from the local computer.
    But for a local runned swf to read from local it needs the user to go to the MM site at security settings to allow the file or folder.
    I recently made a kiosk and lost some braincells in the process when swiching to flash8.
    my lucky break was that I made it an .exe and was able to write the permission .cfg file in the:
    C:\Documents and Settings\[current user]\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust\
    folder


  3. Administrator
    • Visit Site
    December 12th, 2005

    You know Cedric, I NEED THIS :) ASAP

    so at least, I have to make it !!! But it will be great if anyone will help me, or if he got solution already :)


  4. cosmin
    • Visit Site
    December 12th, 2005

    hmm, messed up comment followup. Attempt one:

    may no longer load any content (SWF, HTML, PNG, and so on) from local paths.”>

    I think that’s all folks.
    The user would have to dload the swf and open it from a local path in order for that swf to be able to read from the local computer.
    But for a local runned swf to read from local it needs the user to go to the MM site at security settings to allow the file or folder.
    I recently made a kiosk and lost some braincells in the process when swiching to flash8.
    my lucky break was that I made it an .exe and was able to write the permission .cfg file in the:
    C:\Documents and Settings\[current user]\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust\
    folder


  5. cosmin
    • Visit Site
    December 12th, 2005

    I give up.
    It’s readable.


  6. Administrator
    • Visit Site
    December 12th, 2005

    cosmin, i sent you email :)


  7. hey
    • Visit Site
    December 12th, 2005

    This is a big step back for flash 8 la ocho. Is breaking my 8 ballz.


  8. JesterXL
    • Visit Site
    December 12th, 2005

    Nothing helpful to add, but just glad you are keeping us updated on how this pans out.


  9. Administrator
    • Visit Site
    December 12th, 2005

    i’ve got solution, but now it’s working only in Firefox, not IE :(

    I will write about it soon, must find out why it doesnt work for IE, but it’s base on simple HTTP server on localhost…so you need not to load file from file:///c:/test.swf, but instead http://localhost:8080/test.swf

    This is advice from Theodor Patrick, and source of simple HTTP server will be in IFBIN (IFBIN works on this solution)


  10. John Dowdell
    • Visit Site
    December 12th, 2005

    “… given that all the methods Macromedia list have been tested and do not seem to work…”

    This is where I get a little unsure, because I know that people generally *do* use the methods described in these documents to good effect:
    http://www.macromedia.com/devnet/flash/articles/fplayer8_security.html
    http://www.macromedia.com/go/4c093f20

    I believe you’re seeing what you’re seeing, but I’m not sure yet how others can make it happen too. That’s why it’s hard for me to reply directly.

    hmm… maybe one way to get to the bottom of this would be to see if you can use the above methods in a new, smaller, simpler test project… that would let us focus more directly on the steps. Do you know yet which of the four types of sandboxes you’re in?
    http://www.macromedia.com/devnet/flash/articles/fplayer8_security_03.html

    jd/adobe


  11. Administrator
    • Visit Site
    December 12th, 2005

    John, sure i have small test application, which I’ve already sent to Gilles Drieu (I spoke with him at Spark conference in Amsterdam), he got it, I will upload it here tommorow, i got it only in office, not home.

    But I have solution with HTTP server, but I want solution that should work normally as is described by macromedia….

    And i do not know any flash coder, which done this, i spoke with many flash coders over the world, no one could do this, so if you know someone, who did it, please, can you give me contact to him?

    Thanks many times


  12. Chris Benjaminsen
    • Visit Site
    December 13th, 2005

    I always prefered just to slam a webserver on the kiosk maschine, say an apache on *nix computers, or just the personal webserver for windows kioks.

    Then just create a entry in your hosts file that points localhost.domain.com to the local webserver and use that from your hostfile.

    Ofcouse this is not a perfect solution if you want the users to install some files on there computer to minimize download time. For that there is nothing else to do then config the cache settings on the webserver as good as possible.

    /Chris


  13. Campbell Anderson
    • Visit Site
    January 10th, 2006

    I can make you a small app that loads the top level swf (movie player) from the web and allows access to the harddrive. I have done it before and have the remanants which works….but you have to have .net on the computer (sorry dont know c++ well enough to do it in that)
    would that help? Basically you will have to wrap it to get around the security………

    Campbell


  14. Jan Guichelaar
    • Visit Site
    January 13th, 2006

    Hi all

    I encountered the same problem last week.
    We made a website for a client with flash8, html, ajax, and javascript. It works all fine online.

    Now the client is so satisfied, he wants the whole site on a cdrom.
    To run the site from cdrom we’re entering the flash 8 security problem zone. Loading flv’s is not a problem, but calling javascript from flash gives the security alert from flash, wich guides you to the ‘ONLINE’ security manager. The whole purpose of putting the site on a cdrom is to be able to view it without an internet connection.

    We came up with a (for me) very nice solution. We made an installer wich installs the complete site and content on the users computer and puts the right .cfg files in the right folders.

    But now the client doesn;t trust installers …….so.. back to the drawing board.

    It seems flash 8 is made for online use, not for offline use.

    to MM: do something about this!

    jan


  15. jot
    • Visit Site
    January 20th, 2006

    quote: Macromedia is aware of the impact these changes have on our customers and we do not undertake such projects lightly. We offer our sincere apologies if you find yourself affected.

    =/


  16. michal
    • Visit Site
    March 15th, 2006

    Try this ;) Maybe could help.
    http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager04.html

    And if not enought, flash manual and find info aboud a sandboxType. There is a lot of info.

Live Preview

Leave a comment

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> <pre lang="" line="">

This site is using OpenAvatar based on
Previous Post
Next Post
Images is enhanced with WordPress Lightbox JS by Zeo