<!DOCTYPE html>
<!-- ========================================== kroc camen of camen design ============================================= -->
<title>blog · A Week Without Flash</title>
<link rel="stylesheet" type="text/css" href="/design/design.css" />
<meta name="viewport" content="width=device-width, maximum-scale=1.0, user-scalable=no" />
<link rel="alternate" type="application/rss+xml" href="/blog/rss" title="Just blog" />
<link rel="canonical" href="/blog/flash-week" />
<!-- =================================================================================================================== -->
	<h1><a href="/" rel="index">
		Camen Design
		<li><a href="/">all</a></li>
		<li><a href="/projects">projects</a></li>
		<li><a href="http://forum.camendesign.com">forum</a></li>
		<li><a href="/quote/">quote</a></li>
		<li><a href="/writing/">writing</a></li>
		<li><a href="/blog/" rel="tag">blog</a></li>
		<li><a href="/photo/">photo</a></li>
		<li><a href="/code/">code</a></li>
		<li><a href="/art/">art</a></li>
		<li><a href="/link/">link</a></li>
		<li><a href="/poem/">poem</a></li>
		<li><a href="/audio/">audio</a></li>
		<li><a href="/web-dev/">web-dev</a></li>
		<li><a href="/annoyances/">annoyances</a></li>
		<li><a href="/eve/">eve</a></li>
		<li><a href="/code-is-art/">code-is-art</a></li>
		<li><a href="/inspiration/">inspiration</a></li>
		<li><a href="/windows/">windows</a></li>
		<li><a href="/gift/">gift</a></li>
		<li><a href="/gaming/">gaming</a></li>
		<li><a href="/mac/">mac</a></li>
		<li><a href="/osnews/">osnews</a></li>
		<li><a href="/c64/">c64</a></li>
		<li><a href="/linux/">linux</a></li>
	<a rel="previous" href="/blog/letter_to_mozilla_re_video">
		older article →
	</a><a rel="next" href="/blog/how_silly">
		← newer article
<!-- =================================================================================================================== -->
	<!-- date published or updated -->
	<time pubdate datetime="2009-07-24T10:49:00+01:00">
		<sup>10:49<abbr>am</abbr> • 2009</sup>
		<abbr title="July">Jul</abbr> 24
	<!-- categories -->
		<li><a href="/blog/flash-week" rel="bookmark tag">blog</a></li>
		<li><a href="/web-dev/flash-week">web-dev</a></li>
		<li><a href="/annoyances/flash-week">annoyances</a></li>
	<!-- licence -->
		<a rel="license" href="http://creativecommons.org/licenses/by/3.0/deed.en_GB">c</a>
		share + remix
<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
<h1>A Week Without Flash</h1>
	<strong>Yesterday</strong>, a
	<a href="http://adobe.com/support/security/advisories/apsa09-03.html" rel="external">security advisory</a> from
	Adobe acknowledged the severity of an exploit in
	<a href="http://theregister.co.uk/2009/07/22/adobe_flash_attacks_go_wild/" rel="external">active use</a>. By
	Adobe’s own numbers they claim that Flash is installed on 99% of computers; the number of those on the latest
	version is likely lower, though this vulnerability affects even fully patched versions.
	Personally, when fixing computers I always install Firefox and AdBlock Plus. Immediately people have less
	infections, of less severity and I have less work to do. Flash is both the primary attack vector for Internet users,
	and also the <a href="http://twitter.com/daringfireball/status/2078539734" rel="external">number one reason for
	crashes in the browser</a>. Adobe’s response to this is
	“<a href="http://bynkii.com/archives/2009/06/doing_it_wrong.html" rel="external">use a Flash blocker</a>”.
	This problem will not go away until people get out of their Flash comfort zone and start demanding something else.
	At what point did you <em>choose</em> Flash? Huh? Did you ask for this crashy, unreliable, totally insecure thing?
	No, it was thrust upon you by content producers.
	I have for some time been living without Flash to better understand the problem and to drive me forward in demanding
	and producing <a href="/code/video_for_everybody">better solutions</a>.
	<strong>To that end, in honour of this epic cock-up by Adobe, I am instigating “Flash Free Week” to coincide
	with the security advisory and the week it will take to fix it.</strong>
	I am asking those who are up to the challenge to make a difference by spending a week without Flash. Don’t come to
	me saying you <em>need</em> this, or you <em>need</em> that. I’ve already been going for months without Flash and
	I haven’t died yet. I’m asking you to go a week without Flash even if you think you <em>need</em> it. Because,
	as you know, they say:
		If you can’t go a week without something, you have an addiction.
	Ironically, what I am asking for, is actually the only way for you to be secure against this threat as there is no
	workaround other than to disable or uninstall Flash. NoScript won’t save you, if a trusted site gets compromised
	(<a href="http://isc.sans.org/diary.html?storyid=6847" rel="external">which they have</a>), you will be infected.
	As it is a zero-day exploit the week will start yesterday, the 23<sup>rd</sup> and run until the 29<sup>th</sup>, so
	in reality you only have to go 6 days.
	<br /><br />
	Here are the <a href="http://kb2.adobe.com/cps/141/tn_14157.html?promoid=DTEGO" rel="external">Flash
	<br /><br />
	Blog it.
<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
	<nav><a href="http://forum.camendesign.com">‹ Discuss this in the Forum ›</a></nav>
	<a href="mailto:kroc@camendesign.com">kroc@camendesign.com</a>
		<a href="/blog/flash-week.rem">Rem</a> •
		<a href="/blog/flash-week.html">HTML</a> •
		<a href="/design/">CSS</a> •
		<a href="/.system/">PHP</a> •
		<a href="/.htaccess">.htaccess</a>
	<form method="get" action="https://duckduckgo.com">
		<input type="hidden" name="sites" value="camendesign.com" />
		<input type="search" name="q" placeholder="search…" />
		<input type="submit" value="Go" />
<!-- =================================================================================================== code is art === -->