Security Basics mailing list archives

Re: Adobe Alternatives


From: "Eric C. Lukens" <eric.lukens () uni edu>
Date: Mon, 28 Sep 2009 14:37:50 -0500

I would second just about any alternative PDF reader, but personally
prefer Foxit as well--not just for security, but also performance.

PDF readers I have used:
Foxit (http://www.foxitsoftware.com/pdf/reader/)
Sumatra PDF (http://blog.kowalczyk.info/software/sumatrapdf/index.html)
XPDF (http://www.foolabs.com/xpdf/)

If using Foxit, watch out for the toolbar (and other stuff?) it bundles
by default, but you can opt to leave out.  I feel Foxit would be the
most "professional" looking of them and the one most likely to be easy
to use by former Adobe Reader users.

There are some open source flash player projects, but are not 100%
compatible with all Flash 8 and 9 code.  Gnash seems to be the most
developed, but requires other software (also free) to be installed. 
Until these projects get going more, which they probably will, we're
mostly stuck either keeping Flash around or not getting a full web
experience.

http://www.gnu.org/software/gnash/

-Eric



-------- Original Message  --------
Subject: Adobe Alternatives
From: Jeffrey Walton <noloader () gmail com>
To: Security Focus <security-basics () securityfocus com>
Date: 9/24/09 2:34 AM
Hi All,

Can anyone offer alternatives to Acrobat Reader and Flash Player? I'd
like to remove Adobe software from the network where possible. I've
found Foxit's reader [1] for Acrobat (its been performing well for
about 6 months), but I don't have anything for Flash.

For the pundits and those who feel I'm being too judgemental, here a
small list of reasons:
* The company makes such regular appearances on lists such as BugTraq
that I believe they are socialites [2].
* The company accepts third party software for distribution, which
appears *not* to have been acceptance tested.
  - Macrovision's defective licensing system driver [3]
  - Acrobat Reader's (version 9.1.0.163 et al) includes Lexteks'
Onix32.dll [4], which is a debug build (complete with debug memory
initialization of 0xCC and ESP stack checks)
* After nearly 10 years, Flash is not available for x64 [5]. According
to the company, I should run a 32 bit browser to accommodate their
software [5]

Thanks for any suggestions,
Jeff
Jeffrey Walton

[1] http://www.foxitsoftware.com/pdf/reader/
[2] 2490 hits (not all unique),
http://www.google.com/search?q=adobe+site%3Asecurityfocus.com
[3] http://www.microsoft.com/technet/security/Bulletin/MS07-067.mspx
[4] http://www.lextek.com/
[5] http://kb2.adobe.com/cps/000/6b3af6c9.html

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

  

-- 
Eric C. Lukens
IT Security Policy and Risk Assessment Analyst
ITS-Network Services
Curris Business Building 15
University of Northern Iowa
Cedar Falls, IA 50614-0121
319-273-7434
http://www.uni.edu/elukens/
http://weblogs.uni.edu/elukens/




------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: