enable/disable flash/youtube
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=28059
Printed Date: 02 April 2026 at 8:05am Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: enable/disable flash/youtube
Posted By: Andersen
Subject: enable/disable flash/youtube
Date Posted: 23 November 2009 at 11:43am
|
Hi Bruce.
Would it be possible to disable flash but enable ie youtube? It have come to my attention, that Flash may be risky due to virus etc and will be executed when users are readin the thread which contains added flash. But youtube is just a "link" and therefore not that risky.
As it is now, I´m not able to enable youtube, without enabling flash.
|
Replies:
Posted By: WebWiz-Bruce
Date Posted: 23 November 2009 at 12:19pm
They are both together as the same option in the admin area as they both use Flash to deliver video content. The youTube one is not just a link and uses much the same code as when launching Flash.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting
|
Posted By: Andersen
Date Posted: 23 November 2009 at 12:35pm
|
Yes Bruce, but the contense of the Flash code could involve executing a virus. As for the link to youtube this is not the same issue.
I understand the code for executing the script (wether is´t flash og youtube) is the same. But the contense is not the same. Thats why I wonder if disabling flash still enabling youtube would be possible.
------------- Greets
Andersen
|
Posted By: WebWiz-Bruce
Date Posted: 23 November 2009 at 2:36pm
There are very few viruses if any that can be launched by viewing a Flash file. The only viruses that I have ever heard of to do with Flash involves downloading the Flash file and executing it on your own PC.
If someone did place a virus in a Flash Movie it doesn't matter how you view it be it on YouTube or a direct link in your forum, it would have the same affect.
Web Wiz Forums also adds additional security settings such as disabling network and other functions of Flash that can be used to launch malicious code such as XXS hacking
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting
|
Posted By: recordere.dk
Date Posted: 23 November 2009 at 3:43pm
Hi Bruce
Here in Denmark, we have had some incidents where flashbanners where used in the spreading of virus and trojans.
The hackers took som real banner adds, from well known and "safe" companies.
Decompiled the banners, modified the code, compiled them back into new "real" banners, and booked time for them on different european banner exchange systems.
This way, they could spread their code through normal websites, and the code spread just by viewing the banner in the browser. Ie. just by displaying the flash file.
http://www.earthtimes.org/articles/show/295710,new-online-virus-threat-comes-via-banner-ads.html" rel="nofollow - I think its the same that is warned for here
My concern is, that my WebWizForum could be used the same way. Ie. that a user, by mistake og by accident, could spread harmfull flash code.
But you say, that this can't be done with the flash implementation in WebWizForum? 
Best regards, Lars Ladingkaer, Webmaster, recordere.dk
------------- Webmaster - http://www.recordere.dk
Denmarks AV Magazine
|
Posted By: WebWiz-Bruce
Date Posted: 23 November 2009 at 3:46pm
I am not saying it can't be done but enabling both Flash and YouTube is up to you as anything like this there is a risk.
version 10 has the tow options split so you can have just flash or youtube enabled.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting
|
Posted By: WebWiz-Bruce
Date Posted: 23 November 2009 at 4:19pm
I've just read through the link you gave and according to it the Flash Banner Ads did not actually contain a virus. Instead the banner ads directed the user to a malicious site or tricks the user into clicking the add to download and install some malicious software.
In Web Wiz Forums when Flash is posted the link to display it disables any script access outside of the flash file as well as only allowing internal networking. This limits any malicious code that can do this type of XSS (Cross Site Scripting) that the article is referring to.
The treats highlighted in the article are the same type of threats as you get from clicking any link on the Internet and ending up on a malicious website. As long as you have up to anti-virus software and keep your browser up to date you should be fine.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting
|
Posted By: Andersen
Date Posted: 23 November 2009 at 4:22pm
WebWiz-Bruce wrote:
I am not saying it can't be done but enabling both Flash and YouTube is up to you as anything like this there is a risk.
version 10 has the tow options split so you can have just flash or youtube enabled.
|
Thats all I wanted to hear. This makes it flexible, and I can turn things on/off like I want to, virus or not
------------- Greets
Andersen
|
Posted By: billd3
Date Posted: 23 November 2009 at 4:52pm
Youtube videos are flash FLV files............ Flash in itself is risky because they can execute a buffer overflow and drive through other holes. If it's from Adobe, it's got risks, IMO. (check their history of Reader, Flash, etc. if in doubt - more issues than most any other software other than Windows itself) At least on youtube, you have some checking and accountability involved.
------------- BillD
http://theamcpages.com
http://theamcforum.com
|
Posted By: WebWiz-Bruce
Date Posted: 24 November 2009 at 9:20am
The article that Andersen linked to was just scaremongering really as the exact same article could be written about Gif or JPG banner images or even text links.
The Flash Banners did not actually contain a virus they simply linked to a malicious website so when you clicked on it you were taken to a website containing malcious code that could install a virus on your computer if you had not kept it up to date.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting
|
Posted By: billd3
Date Posted: 24 November 2009 at 5:11pm
Hacked redirects are common, but since so many sites use flash banners now, it's easy for "the press" to say it's a flash issue, when it's a hotlink issue.... Flash files CAN be compromised, and have been, but it's not real common, what is common is folks not securing their sites and links being changed... If your forum wasn't secure, the PNG file could end up leading me to some bogus site instead of your home page........... (but I have no fear of that here)
------------- BillD
http://theamcpages.com
http://theamcforum.com
|
|