Adobe promises to keep patching Flash on mobile ... but doesn't say for how long
Releases final version of Flash Player for Android
Computerworld - Adobe has promised to support the soon-to-be-orphaned Flash Player plug-in for mobile browsers, but has not said how long it will continue to patch security bugs in the software.
In a blog post Wednesday, Danny Winokur, the Adobe executive in charge of interactive development, said that the company would release one more version of Flash Player for Android and RIM's PlayBook before calling it quits.
That last version, labeled 11.1, shipped today.
Winokur, however, pledged that Adobe would keep patching some bugs in Flash Player.
"We will of course continue to provide critical bug fixes and security updates [emphasis added] for existing device configurations," said Winokur.
His mention of "critical bug fixes" may not mean much, as Adobe typically rates all its Flash security updates as "critical" across the board.
Another Adobe manager repeated that promise.
"Adobe will continue to ship security updates for Flash Player mobile after the final feature release," said Brad Arkin, the company's senior director of product security and privacy, in a message on Twitter Thursday.
But neither Winokur or Arkin spelled out how long Flash Player 11 security updates will be offered for smartphones and tablets. And on Thursday, Adobe's public relations staff declined to comment on a support timeline.
That struck Andrew Storms, director of security operations at nCircle Security, as odd.
"Why would they not tell us?" Storms asked. "That's to the detriment of everybody. If they make a date [for the end of support], that would get users off it sooner and force developers to get off Flash, too."
Storms speculated that Adobe may not have yet decided, or that commitments -- such as to one or more mobile service providers -- may have tied their hands.
Adobe's support policies aren't any help in calculating Flash Player's remaining time because unlike Microsoft, which hews to a time-oriented support lifecycle -- five years for consumer products, ten for enterprise software -- Adobe does not. Instead, the company promises to support only the current major version and the one before that.
However, some times Adobe pulls the trigger early "as a result of changing market conditions and impact to customers," according to its website. Last February, for example, Adobe retired Flash Player 9 even though Flash Player 11 had not shipped, citing the former's five-year run and its paltry 2% market share at the time.
Adobe's handling of Shockwave Player may be a better clue: Although Shcokwave Player 11 was introduced in March 2008, Adobe is still pushing patches to users, most recently on Tuesday.
Ironically, Adobe did patch Flash Player Thursday, releasing 11.1 for not only Android but also desktop browsers on Windows, Mac OS X and Linux.
The update fixed 12 flaws, all considered critical, most of them memory corruption vulnerabilities.
Yesterday's update was the ninth this year for Flash Player, nearly double the number Adobe released in all of 2010.
Users running desktop browsers other than Chrome -- Google also updated its browser, which includes Flash Player, on Thursday -- can download the patched version from Adobe's site.
Android users can obtain Flash Player 11.1 from the Android Market.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, or subscribe to Gregg's RSS feed . His e-mail address is firstname.lastname@example.org.
Read more about Mobile Apps in Computerworld's Mobile Apps Topic Center.
- Gartner Magic Quadrant for Mobile Application Development Platforms As unprecedented numbers of enterprises build mobile applications, the mobile application development platform market continues to grow and evolve rapidly.
- The Total Economic Impact of IBM's Worklight Platform Mobile is the fastest growing consumer technology in history. As enterprises build apps to engage these new users they are facing increased complexity...
- Improve Your Mobile Application Security with IBM Worklight IBM® Worklight helps organizations extend their business across multiple mobile devices. It provides an open, comprehensive and advanced mobile application platform to help...
- Unlock the Value of Enterprise Mobility Download this guide and learn how to manage the secure deployment of enterprise mobile apps and data, while still encouraging the levels of...
- It's Chaos Out There Worried about your mobile apps? You should be; it's chaos out there. Check out this humorous video and see if you can recognize...
- LIVE EVENT: 5/7, The End of Data Protection As We Know It. Introducing a Next Generation Data Protection Architecture. Traditional backup is going away, but where does this leave end-users? All Mobile Apps White Papers | Webcasts