Archive for September, 2009

10,000,000 and counting update to secure version of Flash

Last week Ken Kovash, Mozilla’s manager of metrics, wrote a blog post on Mozilla’s metrics blog analyzing the results of Mozilla’s campaign to warn users if their version of Adobe Flash is out of date. Ken noted that in just one week 10,000,000 people have clicked on the “flash update” link below.

flash_update_calltoaction_v4

Sean Michael Kerner from Internet News helps put that number into perspective. He says, “That potentially means that 10 million people were running older out-of-date and insecure versions of Flash. It means that despite Adobe’s own efforts to get people to update with their own update mechanisms and public outreach that 10 million people were still left out of the loop.”

Mitchell Baker and Johnathan Nightingale also commented on the success of the effort in blog posts last week.

ComputerWorld’s Gregg Keizer includes comments from Adobe in his article, “Adobe on Thursday confirmed a spike in traffic to its Flash Player update page, and applauded Mozilla’s move. ‘For us, anything that others do to help users stay up-to-date is a good thing,’ said Brad Arkin, Adobe’s director for product security and privacy. ‘We’re glad to see Mozilla doing this.’”

Additional coverage includes GHacks, Download Squad, Geek.com, SC Magazine and InformationWeek and Heise.

Mozilla News

Mozilla helps users keep plugins updated

Earlier this month Mozilla announced that beginning with the Firefox 3.5.3 and Firefox 3.0.14 security and stability updates, Mozilla will warn users if their version of the Adobe Flash Player plugin is out of date. Old versions of plugins can cause crashes and other stability problems, and can also be a significant security risk. Mozilla is focusing on the Adobe Flash Player both because of its popularity and because some studies have shown that as many as 80% of users currently have an out of date version.

Since the Firefox 3.5.3 and 3.0.14 security updates have gone out,  the news has gotten significant attention in the press, with most of the discussions being centering on the positive implications of the updates for users.

Sean Michael Kerner, from Internetnews.com comments, “There are many (millions?) users that open their browsers every day and browse sites using outdated versions of Adobe Flash. I suspect that most of those users don’t have a clue that they are using vulnerable software…Having the browser, the place where most users interact with Flash, as the place where an update notification is made is just such an obvious (and great) idea.”

Geek.com’s Mathew Humphries says, “With Firefox’s growing user base and little reminders popping up regularly to tell you plug-ins are out of date it will surely have a positive impact on those updating software like the ever-vulnerable Flash player. Although it won’t stop malware targeting the browser and Flash in particular it will mean more of those attacks are blocked before they can do any harm.”

Other coverage highlights include: PC Magazine, SC Magazine, TechSpot, Heise, The Washington Post, PC Pro, Ghacks Tech News, ZD Net, and Computerworld.

Firefox News