Gnash should be disabled by default?

16 réponses [Dernière contribution]
sec
sec
Hors ligne
A rejoint: 10/14/2012

Sites like Soundcloud and Mixcloud have HTML5 functionality that kicks in if it detects that you don't have Flash enabled.

The trouble is, if you have Gnash enabled, it tries that (and fails) without ever getting to HTML5. (Gnash doesn't work on sites like Soundcloud and Mixcloud.)

This could lead people to thinking that you can't use these sites in Abrowser, when in fact you just have to disable Gnash and then they work fine.

lembas
Hors ligne
A rejoint: 05/13/2010

I'm all for this. It would send the right message to Trisquel users and web sites.

Long live HTML5, flash is dead!

Dave_Hunt

I am a member!

Hors ligne
A rejoint: 09/19/2011

For a corpse, flash still seems animated; lol.

On 07/30/2013 10:29 AM, name at domain wrote:
> Long live HTML5, flash is dead!

dudeski

I am a member!

Hors ligne
A rejoint: 07/03/2013

Hear hear!

Garsmith
Hors ligne
A rejoint: 07/27/2013

I was thinking of a plugin where, like Cookie plugins, you can choose what sites cookies will be accepted and not accepted. I did a little search but could not find a plugin of that kind. Someone pointed to No script but that don't seem to be a so good solution for me.

Maybe something for a programmer to make?

lloydsmart

I am a member!

Hors ligne
A rejoint: 12/22/2012

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I agree with the premise of this thread - I'd like to see HTML5 preferred by default, but I'd be cautious about removing Gnash for the reasons stated - we don't want non-html5 sites to break and link people to a Flash download.

What to do?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iF4EAREIAAYFAlH4KwEACgkQgijxUCZnvluamQD9EtzM+iQeT2hrOvpAyqfZcr+/
fk+TF4hq9w5KNmOvxoYA/1QO9AzWAMheWn3msCaVeLzJFItNOxE66IJvsxNB2c46
=5Orr
-----END PGP SIGNATURE-----

sirgazil (non vérifié)
sirgazil

I'd say:

1. Learn that Adobe Flash is non-free and sites asking you to download it don't know or don't care about software freedom.
2. Learn that SWF format is not a free format, so why perpetuate its use?
3. Remove Gnash. It's only for SWF files. I thank Gnash developers for the good intentions, though.
4. Be patient. HTML5 use is growing and growing.

GNUser
Hors ligne
A rejoint: 07/17/2013

Well, I have to agree. Unless you use some specific websites that need flash AND work with gnash/lightspark, it makes no sense to have it installed.
More and more websites work with html5 these days, and html5 has not shown (yet) to be half a pain in terms of security/privacy issues as flash.
I can say that I don't have OpenJava or Gnash installed, and I can still do pretty much the same things I used to do. Sure, some websites and aplications use Java or Flash, and they are not malicious. The programmers just learned some cool things they could do with those formats/languages, and they used it in the best of intentions. However, I really think we should (one step at a time) move towards a more free/open internet.
So, I can vote "yes" for disabling Gnash.

However, I have to mention this: when you try to use some websites they won't give you html5, but if you change user agent in Abrowser to Ipad, they will imeddiatly work. Some websites actually try to make html5 available only for Ipad!!! That's really.... bad, you know, because they are saying "we want to spy on you and force you to use this proprietary dangerous software, but we won't lose a user because of that, so if you have Ipad here is html5, if not, f*** you, use flash!"

aloniv

I am a translator!

Hors ligne
A rejoint: 01/11/2011

Some Israeli sites (such as Nana) also offer HTML5 video if you identify as a mobile user (using e.g. the add-on User Agent Switcher).

Website developers implement HTML5 video in their mobile interface due to lack of Adobe Flash support on mobile devices. Most desktop users install Flash, so website developers have little incentive to switch their regular desktop interface to HTML5. Bear in mind that HTML5 video is not a free solution either as it usually requires non-free JavaScript, although unlike Flash it is cross-platform.

GNUser
Hors ligne
A rejoint: 07/17/2013

Html5 is still way better than flash ;)
Flash is unsecure and a real pain in the back. Html5 sometimes loads "non free javascript" as in license. The actual code is not obfuscated in any way, so I don't really think of that as such a bad thing.

I just think it's stupid that so many websites don't know how to see if the browser has or not a flash player installed.

But yeah, Noscript is your friend... a very annoying friend who never shuts up, but a friend and a good one. Use it everyone.

Dave_Hunt

I am a member!

Hors ligne
A rejoint: 09/19/2011

Sometimes I use linternamagica; will noscript conflict with greasemonkey?

onpon4
Hors ligne
A rejoint: 05/30/2012

No, NoScript doesn't block your own user scripts from Greasemonkey.

GNUser
Hors ligne
A rejoint: 07/17/2013

Thanks for the clarification. Never tried that myself.

lembas
Hors ligne
A rejoint: 05/13/2010

>Noscript is your friend... a very annoying friend who never shuts up

What does this mean?

GNUser
Hors ligne
A rejoint: 07/17/2013

It means that Noscript will block all javascript, making it almost impossible to use the web with it turned on (you have to click in a few dozen permissions for some websites to run). So, yeah, it's annoying. BUT it protects you. So it's a very good friend.
Actually, when using the Tor Browser, even with noscript blocking all, it still works well enough... I don't know why.

andrew
Hors ligne
A rejoint: 04/19/2012

On 01/08/13 09:36, GNUser wrote:
> But yeah, Noscript is your friend... a very annoying friend who never
> shuts up, but a friend and a good one. Use it everyone.

You can disable the message that comes up when a script is blocked. I
used to do this every time I used NoScript. But I don't need to use it
anymore, as I just disable JS entirely.

Andrew.

GNUser
Hors ligne
A rejoint: 07/17/2013

HUm, I never actually tried it, but in theory, it should. Because if you have noscript set to block ALL javascript, then it should block your own scripts.

Problem is, when you use flash/gnash/lightspark/whatever_flash_plugin, you are actually activating the flash on the website. It might not run a video, but security holes will open for sure, and supercookies will be there too!
I decided to try using the web without any flash plugin present in the system, and the only annoyance is the fact that the websites that have it, won't load it (I have to use user agent, which is not what I see as a the best solution).

Anyway, I am a firm supporter of using html5 with webm/theora. Free and Open standards are the only way to have a solid future ahead!