With no patches yet for the latest Adobe Flash zero-day vulnerabilities that are being exploited in the wild, Mozilla has (for now at least) blocked Flash in Firefox.
Mark Schmidt, head of Firefox support at Mozilla, announced the news on Twitter:
BIG NEWS!! All versions of Flash are blocked by default in Firefox as of now. https://t.co/4SjVoqKPrR #tech #infosec pic.twitter.com/VRws3L0CBW
— Mark Schmidt 🌐 (@MarkSchmidty) July 14, 2015
In a subsequent tweet, Schmidt made clear that the block was only temporary – and would be removed when Adobe releases a version of Flash which is no longer being actively exploited.
Sorry about that.
When a fellow Twitter user asked Schmidt if the Flash block would be in place forever more, the Mozilla staffer replied “I wish!” – so at least we know his heart is in the right place.
Firefox users can still enable Flash via the settings menu if they wish.
Further reading:
- Well, what do you know… Adobe patches Flash against zero-day vulnerabilities
Slightly confusing title, Flash is not blocked! Only older out of date versions are!
Good stuff.
Somebody needs to let Yahoo know. Yahoo requires flash to "see" most of their articles. They also do no allow use of flash blockers. Since their main page seems to use HTML5 I can only assume their articles require flash to allow them to play advertisements.