Adobe Wake Up! Concentrate on Secure Code!

I get more mail about this ONE subject more than any other.  If you subscribe to US-CERT (United States Computer Emergency Readiness Team) then you've received a notice about Adobe so often you hardly notice.  Sorry, Adobe, your software is consistently considered the least secure.   Do you even try?  Really, I know you have created the defacto standard for a lot of applications.  Lots of people use and really like your software.  Can you please try harder?

US-CERT Current Activity

Adobe Releases Security Advisory for Adobe Flash Player

Original release date: Friday, May 4, 2012 at 11:06 am
Last revised: Friday, May 4, 2012 at 11:06 am


Adobe has released a Security Advisory for Adobe Flash Player to
address a vulnerability affecting the following software versions:



 * Adobe Flash Player 11.2.202.233 and earlier versions for Windows,
Macintosh, and Linux operating systems * Adobe Flash Player
11.1.115.7 and earlier versions for Android 4.x * Adobe Flash Player
11.1.111.8 and earlier versions for Android 3.x and 2.x


This vulnerability may allow an attacker to cause a
denial-of-service condition or take control of the affected system.


US-CERT encourages users and administrators to review Adobe Security
Bulletin APSB12-09 and apply any necessary updates to help mitigate the risk.

 Adobe, when will you start creating secure code? I know your web site says you take security very seriously.  It appears you have a handle on it.  So why all the alerts?

Marketing can make any product or service look like the best thing ever.  Flash can make a web site look awesome too.  I'm convinced marketing is 90% smoke and mirrors.  To find the essence of a product or service you have to experience it for yourself.  Then you can be the judge.  People know quality when the experience it.

First to market - is it really everything?  Yes. This business theory has proven itself to be one of the more effective ways to be successful in business.  Look at the iPhone.  Look at Windows 3.1.  A revolutionary idea happened and it was available to the masses at a reasonable price first.  Companies will deal with bugs, technical issues and support as the new product flies out the door.  Rarely do you find a product or service to be of the highest quality AND first to market.  You can only pick one. 

What's the answer? Regulation?  Maybe.  Consumer pressure?  That would help.  Open competition? There it is.  Often times in business when a leader stumbles, even a little, it opens the doors for a competitor to take the lead.  And the lead can change hands often. 

So Adobe, beware of your replacement.  The competition is coming for you.  Stop contributing to software vulnerability bulletins and notification systems.  Start paying closer attention to your code.