Comments on: new flash security policies http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/ and still for good reason. Mon, 05 Jul 2010 21:26:02 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Tom http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-172593 Tom Tue, 09 Jun 2009 13:41:38 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-172593 The arrogance! Who do Adobe think they are that they can introduce a new protocol on a privileged port into the web? This is infuriating. It's a waste of bandwidth and a waste of time. Adobe Flash isn't so important to me that I want to invest ANYTHING in learning and supporting their security model, only to have it change on me in the next version and require another 5 hours of reading and implementation! I just need low-level sockets in my web applications. When this is natively available in common browsers it's bye-bye to Adobe and their CS-undergrad-student-project approach to security. Hopefully firewall makers will boycott this stupidity. The arrogance!

Who do Adobe think they are that they can introduce a new protocol on a privileged port into the web?

This is infuriating. It’s a waste of bandwidth and a waste of time. Adobe Flash isn’t so important to me that I want to invest ANYTHING in learning and supporting their security model, only to have it change on me in the next version and require another 5 hours of reading and implementation!

I just need low-level sockets in my web applications. When this is natively available in common browsers it’s bye-bye to Adobe and their CS-undergrad-student-project approach to security.

Hopefully firewall makers will boycott this stupidity.

]]> By: Sampath http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-166615 Sampath Sat, 25 Apr 2009 07:01:38 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-166615 We got following Error messages… only client side (Chat Window).. Error: Connection to socket server failed (Flash Security Error). how to fix this issue.. please give some extra tips.. by SR We got following Error messages…
only client side (Chat Window)..
Error: Connection to socket server failed (Flash Security Error).

how to fix this issue.. please give some extra tips..

by
SR

]]> By: Tran Minh http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-166528 Tran Minh Fri, 24 Apr 2009 03:23:08 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-166528 .net policy server here : http://code.google.com/p/flash-policy-server .net policy server here : http://code.google.com/p/flash-policy-server

]]> By: Tran Minh http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-85760 Tran Minh Wed, 16 Jul 2008 07:28:40 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-85760 I have created the policy server in .net. Anyone needs the source code can drop me a mail (info@epioneersolutions.com). Thanks for this great article. I have created the policy server in .net. Anyone needs the source code can drop me a mail (info@epioneersolutions.com).

Thanks for this great article.

]]> By: This sucks http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-64959 This sucks Fri, 09 May 2008 21:24:33 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-64959 Well damn it i used to be able to play flash games at work and now adobe f-ed this all up. I am not a happy camper and want to play some one please tell me what to do. I hate big brother! Well damn it i used to be able to play flash games at work and now adobe f-ed this all up. I am not a happy camper and want to play some one please tell me what to do. I hate big brother!

]]> By: Gabriel http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-61780 Gabriel Wed, 30 Apr 2008 22:42:25 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-61780 For those who have multiple servers i.e. some web servers on one side and a xml (or not) socket server on another side, the "master policy socket server" (tm) has to run on the socket server, not the web servers. This would have been overkill to have to run some crappy socket server on every single web server serving SWF files. Shame on Adobe they are not even using "virtual hosts" on the policy server, it is therefore not possible to run separate policies (for separate domains or on shared socket server hosting) from the same master policy server. We are back to the problems we had 30 years earlier with FTP and HTTP/1.0 needing an IP for every single domain name. Not to mention how much companies are using secured applications with Flash as a frontend, directly from firewalled and/or secured vpn connections, obviously allowing only connections to port 80. What a massive turn on for competitors like Silverlight... For those who have multiple servers i.e. some web servers on one side and a xml (or not) socket server on another side, the “master policy socket server” ™ has to run on the socket server, not the web servers. This would have been overkill to have to run some crappy socket server on every single web server serving SWF files.
Shame on Adobe they are not even using “virtual hosts” on the policy server, it is therefore not possible to run separate policies (for separate domains or on shared socket server hosting) from the same master policy server.
We are back to the problems we had 30 years earlier with FTP and HTTP/1.0 needing an IP for every single domain name. Not to mention how much companies are using secured applications with Flash as a frontend, directly from firewalled and/or secured vpn connections, obviously allowing only connections to port 80.
What a massive turn on for competitors like Silverlight…

]]> By: Untitled :: Blog Archive » flash policy service daemon http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-59332 Untitled :: Blog Archive » flash policy service daemon Tue, 22 Apr 2008 09:05:21 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-59332 [...] policy service daemon Well, it's been months since I promised to post some usable socket policy service code, so I [...] [...] policy service daemon Well, it’s been months since I promised to post some usable socket policy service code, so I [...]

]]> By: Untitled :: Blog Archive » flash socket policies update http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-59196 Untitled :: Blog Archive » flash socket policies update Mon, 21 Apr 2008 18:57:06 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-59196 [...] socket policies update I’ve been getting a lot of positive feedback recently on the post I made last December on this topic, so it’s probably time to post an [...] [...] socket policies update I’ve been getting a lot of positive feedback recently on the post I made last December on this topic, so it’s probably time to post an [...]

]]> By: Tom http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-58746 Tom Sat, 19 Apr 2008 23:21:32 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-58746 Bad point for Adobe! Now I have to configure all my servers, my customers call me every time arrrrfff!!!!! I have just a problem with a Java socket server, I receive the "" from the Flash player and I send the cross-domain XML but it fails!! Is someone has an example of XML syntax which works ??? Thanks u so much! Bad point for Adobe! Now I have to configure all my servers, my customers call me every time arrrrfff!!!!!

I have just a problem with a Java socket server, I receive the “” from the Flash player and I send the cross-domain XML but it fails!!

Is someone has an example of XML syntax which works ???

Thanks u so much!

]]> By: Paraschiv Sergiu http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/comment-page-1/#comment-58682 Paraschiv Sergiu Sat, 19 Apr 2008 10:05:53 +0000 http://ammonlauritzen.com/blog/2007/12/13/new-flash-security-policies/#comment-58682 Me again :)) It seems that whenever the swf does not connect due to problems with the 843 policy server (don't know why these problems appear), the swf sends, as expected, a policy-file-request. If you correctly respond to this request then the swf reconnects and all is ok. I does not work if I stop the 843 policy server, so this is just a failsafe! Me again :) )

It seems that whenever the swf does not connect due to problems with the 843 policy server (don’t know why these problems appear), the swf sends, as expected, a policy-file-request. If you correctly respond to this request then the swf reconnects and all is ok.
I does not work if I stop the 843 policy server, so this is just a failsafe!

]]>