this post was submitted on 11 Dec 2020
41 points (97.7% liked)

Open Source

30846 readers
299 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 5 points 1 year ago (1 children)

I expect it to fair much better than Flash. 808/1020 (79%) of the CVEs reported against flash were for memory errors (buffer overruns and things) that allowed remote code execution. So, assuming the Ruffle developers haven't been using "unsafe", just writing it in Rust immediately removes 80% of the security problems that were with Flash.

Also, many of the security problems with Flash were deliberate (by design). For example, Flash was designed to send your browser fingerprint to advertising sites. Ruffle obviously doesn't do that.

[โ€“] [email protected] 2 points 1 year ago

Thanks for your explanation!