<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: &#8220;Adobe AIR data privacy and security&#8221; - slides, notes, links</title>
	<atom:link href="http://probertson.com/articles/2009/06/09/adobe-air-data-privacy-and-security-slides-notes-links/feed/" rel="self" type="application/rss+xml" />
	<link>http://probertson.com/articles/2009/06/09/adobe-air-data-privacy-and-security-slides-notes-links/</link>
	<description>Thoughts on web development, user-centered design, code, etc. by Paul Robertson</description>
	<lastBuildDate>Thu, 02 Sep 2010 11:54:47 -0400</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: mark bramblett</title>
		<link>http://probertson.com/articles/2009/06/09/adobe-air-data-privacy-and-security-slides-notes-links/comment-page-1/#comment-68844</link>
		<dc:creator>mark bramblett</dc:creator>
		<pubDate>Mon, 16 Nov 2009 17:36:44 +0000</pubDate>
		<guid isPermaLink="false">http://probertson.com/?p=279#comment-68844</guid>
		<description>hi,

thanks for this great comp sci tech info dump.  I just loaded adobe acrobat reader v9, adobe photoshop elements v8 and acrobat professional v9.

they have loaded support adobe air runtime support.

__________

have a very simple question.  I have remote connection turned off on my personal system for good reason.

I don&#039;t know if I want the security hole having thin or thick client network apps lounging and grazing (like cows :O) on my system.

I use adaware and adwatch in real time to catch most things and obviously like many people I run NIS 2010 for the basics.

__________

I saw that this runtime and application model is using digital cert&#039;s.  is the certification authority and digital certs being registered to application vendors the same CA and digital certificates being registered to companies and their servers?

the point is microsoft gives new digital cert updates that load on our operating systems as a routine basis.  are the new adobe AIR certs going to come from the same pool?

this seems like an awfull important point.  I don&#039;t know if I want adobe air runtime activated on my machine and I will go ahead and ask the norton and adaware people if they will filter in realtime for these types of potential hacks.

but my real question since you have obviously done a wonderful bit of research on the topic - is who is the certificate authority for these new kind of certs, how are they propagated to normal people like me (i.e. is adobe going to be the Cert Authority and manage these just like microsoft or any trusted network provider or is this all up in the air).

thank you... your comments will really help me decide how much adobe Air support I want to activate on my machine.

best regards,

mark bramblett</description>
		<content:encoded><![CDATA[<p>hi,</p>
<p>thanks for this great comp sci tech info dump.  I just loaded adobe acrobat reader v9, adobe photoshop elements v8 and acrobat professional v9.</p>
<p>they have loaded support adobe air runtime support.</p>
<p>__________</p>
<p>have a very simple question.  I have remote connection turned off on my personal system for good reason.</p>
<p>I don&#8217;t know if I want the security hole having thin or thick client network apps lounging and grazing (like cows :O) on my system.</p>
<p>I use adaware and adwatch in real time to catch most things and obviously like many people I run NIS 2010 for the basics.</p>
<p>__________</p>
<p>I saw that this runtime and application model is using digital cert&#8217;s.  is the certification authority and digital certs being registered to application vendors the same CA and digital certificates being registered to companies and their servers?</p>
<p>the point is microsoft gives new digital cert updates that load on our operating systems as a routine basis.  are the new adobe AIR certs going to come from the same pool?</p>
<p>this seems like an awfull important point.  I don&#8217;t know if I want adobe air runtime activated on my machine and I will go ahead and ask the norton and adaware people if they will filter in realtime for these types of potential hacks.</p>
<p>but my real question since you have obviously done a wonderful bit of research on the topic - is who is the certificate authority for these new kind of certs, how are they propagated to normal people like me (i.e. is adobe going to be the Cert Authority and manage these just like microsoft or any trusted network provider or is this all up in the air).</p>
<p>thank you&#8230; your comments will really help me decide how much adobe Air support I want to activate on my machine.</p>
<p>best regards,</p>
<p>mark bramblett</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Churchill Security</title>
		<link>http://probertson.com/articles/2009/06/09/adobe-air-data-privacy-and-security-slides-notes-links/comment-page-1/#comment-64208</link>
		<dc:creator>Churchill Security</dc:creator>
		<pubDate>Tue, 21 Jul 2009 14:32:54 +0000</pubDate>
		<guid isPermaLink="false">http://probertson.com/?p=279#comment-64208</guid>
		<description>Hi, thankyou for your awesome share. Sorry I couldn&#039;t make your presentation at Flex, however I am interested to know your thoughts on the security vulnerabilit on SQL injection, I have already spent months writing internally our code, only to find that I need to re-write it due to running the risk of my sql statements being wrote incorrectly. (slide 52) ? Or am I just completely confused?</description>
		<content:encoded><![CDATA[<p>Hi, thankyou for your awesome share. Sorry I couldn&#8217;t make your presentation at Flex, however I am interested to know your thoughts on the security vulnerabilit on SQL injection, I have already spent months writing internally our code, only to find that I need to re-write it due to running the risk of my sql statements being wrote incorrectly. (slide 52) ? Or am I just completely confused?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
