Posted 03/25/09 at 08:15:03 AM by Pulkit Chandna

HP has begun offering a free Flash security tool called HP SWFScan, which helps developers identify vulnerabilities in their Flash apps. Though the ubiquity of Flash-based content should be enough motivation for developers to tighten the screws, a research conducted by HP revealed otherwise.

Thirty-five percent of the 4,000 Flash apps sampled by HP were found to be against Adobe’s security best practices. SWFScan decompiles Flash apps and checks the underlying ActionScript code for flaws. HP claims developers can even “audit third party applications without requiring access to the source code.”

Read More

Posted 07/04/08 at 11:47:47 AM by Paul Lilly

Developers concerned about indexing have thus far been hesitant to incorporate Flash into websites because of the challenge involved in making the content searchable. This despite the fact that more than 98 percent of internet-connected computers have Adobe's Flash Player installed. Search engines are able to index static text and lnks within Flash SWF files, but as Adobe points out, "rich internet applications and dynamic Web content have been generally difficult to fully expose to search engines because of their changing states," a problem which also exists in other RIA technologies.

To help get over that hurdle, Adobe announced a new initiative with Google and Yahoo to make Flash files more indexable-friendly by search engines. For its part, Google says it developed an algorithm that explores Flash files in the same way a surfer does, "by clicking buttons, entering input, and so on." Any text visible to a website visitor while interacting with a Flash file is also visible to Google's algorithm. And while Yahoo isn't quite as far along as Google, the collaboration with Adobe means it's now a matter of when, not if, SWF applications become more searchable.

Missing from this latest announcement is any mention of Microsoft and its MSN Search. It remains unclear whether Adobe purposely excluded the Redmond company, which owns Silverlight (a competitng format to Adobe's Flash), or if Microsoft chose not to participate. But regardless of Microsoft's level of involvement, expect to see more Flash content, whether you want it or not.

Read More