File: 4chan_otakon2006-low.swf-(1.94 MB, 640x480, Other)
[_] welp, this was fun Anonymous 01/11/21(Mon)11:20:32 No.3456606
The 12th of January is tommrow, and with it, flash will not be working anymore, unless you
installed flash 32.0.0.371 or earlier, which don't have the killswitch.
I hope the mods got something fun planned for tommrrow. Mayby some cool touhou tuesday flash?
>> [_] Anonymous 01/11/21(Mon)13:37:46 No.3456618
>>3456606
>The 12th of January is tommrow, and with it, flash will not be working anymore
Actually, if I'm not mistaken it'll stop working in just under five and a half hours from right
now. That is, of course if you don't do something to stop that from happening.
>> [_] Anonymous 01/11/21(Mon)13:51:17 No.3456624
>>3456618
>>3456606
there's two options besides downgrading:
A) you use the mms.cfg file to set domains in an allowlist
B) you hex edit the plugin to effectively remove the killswitch
>> [_] Anonymous 01/11/21(Mon)14:04:56 No.3456628
>>3456624
Two questions:
A) Where would I go to find out the proper syntax for setting whitelisted domains in mms.cfg?
B) Where would I find the files that need to be hex edited for the plugin for a standalone
browser, for example Palemoon portable?
>> [_] Anonymous 01/11/21(Mon)14:16:18 No.3456631
>>3456628
A) lurk more
just kidding
https://www.adobe.com/content/dam/acom/en/devnet/flashplayer/articles/flash_player_a
dmin_guide/pdf/latest/flash_player_32_0_admin_guide.pdf
just serach for the section of AllowList,
here's a few examples:
EnableAllowList=1
AllowListUrlPattern=*://*.4chan.org:*
AllowListUrlPattern=*://*.4cdn.org:*
and one similar for all other domains you want flash on, also add one for local files
AllowListUrlPattern=file:///*
AllowListUrlPattern=file:*
AllowListUrlPattern=file:///C:/*/*.*
AllowListUrlPattern=blob:*
>if you're there might as well add
AllowListRootMovieOnly=1
SilentAutoUpdateEnable=0
EOLUninstallDisable=1
B)
http://cache.tehsausage.com/flash/defuse.txt
you need to open the files described there in a hex editor of your choice
I think palemoon standalone doesn't use the install directory of flash, but has its own portable
plugins in a folder inside the main folder it runs from
I haven't tested yet if the mms.cfg gets called from inside that folder or the regular system
folder though
I know with a non portable standard install it works from the system directory
also add
AllowListPreview=1
if you want to see the results right now and not wait until the killswitch tomorrow
>> [_] Anonymous 01/11/21(Mon)14:17:30 No.3456633
>>3456624
Wasn't there also that open source alternative? Or more like three of them.
>> [_] Anonymous 01/11/21(Mon)14:28:37 No.3456636
I think I successfully hex-edited my copy of Flash to work till infinity (at least, it still
works when I change my clock).
However I use Chrome (inb4 botnet). Does the browser have its own kill switch for all things
Flash?
>> [_] Anonymous 01/11/21(Mon)14:30:52 No.3456638
>>3456631
>http://cache.tehsausage.com/flash/defuse.txt
>you need to open the files described there in a hex editor of your choice
I used HxD to open the six files mentioned by tehsausage (assuming the two copies of Flash.ocx
are equivalent to the (apparently nonexistent in my install) Flash32_32_0_0_453.ocx and
Flash64_32_0_0_453.ocx), but couldn't find the timestamp in question in those two files. Any idea
what's up with that?
>> [_] Anonymous 01/11/21(Mon)14:39:59 No.3456641
>>3456631
I had the same problem as >>3456638
Been trying to figure things out for hours now. I know next to nothing about software. Wish that
shit would be more like chemistry.
>> [_] Anonymous 01/11/21(Mon)15:10:01 No.3456647
>>3456638
Flash32_32_0_0_453.ocx and
NPSWF32_32_0_0_453.dll
just mean that this is the version of flash that this guy had installed
the numbers will be different if you're on a different version of flash and most likely also the
offsets
just note that NPSWF....dll is the firefox (and palemoon) plugin, pepflashplayer is the chrome
plugin and the ocx is either the active X microsoft plugin or a helper file idk
for palemoon users I copied the NPSWF dll to the plugin folder of the standalone browser, so it's
most likely the only thing needed to play flash and if you edit it you should be good
also I think the text contains an error as the 64 bit version of the plugin (which I used because
I have a 64bit standalone palemoon) starts with NPSWF64 and not NPSWF32, so keep that in mind,
there's also the two FLASHUTIL64 files which are most likely only used for update procedures and
installer popups
as far as I am concerned the NPSWF64_32_0_0_*.dll is the flash player plugin, so if you mod that
you should be good
>>3456641
nobody can figure out hex code by itself
just look for the exact string of characters, if it's not there you have little chance of just
hitting it by chance if you don't know what you're doing
>> [_] Anonymous 01/11/21(Mon)15:11:45 No.3456648
https://archive.org/download/flashplayerarchive/pub/flashplayer/installers/archive/f
p_32.0.0.371_archive.zip
>> [_] Anonymous 01/11/21(Mon)15:36:32 No.3456656
>>3456647
>nobody can figure out hex code by itself
>just look at the exact string of characters
Ok so it´s trial and error then. Thank you /f/riend.
Stupid question: is there a chance that removing it after the 11th will work? I´m getting real
sleepy, and have a tendency to attempt stupid things when I´m deprived of sleep and desperate. Or
I could w8 till ruffle works, but id rather go full trial and error.
>> [_] Anonymous 01/11/21(Mon)15:42:29 No.3456658
>>3456656
>trial and error
>>3456638 here, I'm not sure what you mean, but in case you're not aware of this HxD has a search
function which is what I used to find the timestamp in four of the six listed files (tehsausage's
offsets were wrong in about half). Your guess is as good as mine as to how things will work after
the 12th, but I know that I'm going to back everything I can up on external storage, just in case.
>> [_] Anonymous 01/11/21(Mon)15:56:36 No.3456661
>>3456658
I already used the search function. Searched for timestamp, number provided for time stamp, the
double precision point, offsets for my version,
dates like tomorrow date in hex and regular in european and English/ American writing style. No
sensible results so far. That´s why I´m willing to go trial and error at this point. Either I´m
completely stupid/incompetent (very likely) or there is something going on here (also likely,
says my sleep deprivation-paranoia. After all the glowies and microsoft are everywhere. right ?)
>> [_] Anonymous 01/11/21(Mon)16:35:32 No.3456664
Why do all that shit when you can just downgrade a couple minor revisions
It's not like you have to jump from v32 to say v22 where there's a chance newer flashes might
break
>> [_] Anonymous 01/11/21(Mon)17:11:37 No.3456668
>>3456661
Pasting the following:
00 00 40 46 3E 6F 77 42
into the search box in HxD works for me, at least on four of the six files.
>> [_] Anonymous 01/11/21(Mon)17:16:03 No.3456672
>>3456661
Oh, one more thing that's easy to miss: you have to make sure you're searching for a hex-value,
not a text-string. I'll bet that's your problem.
>> [_] Anonymous 01/11/21(Mon)19:17:59 No.3456686
Well, I think I've got it set up to last me until 2038. I used that year since it's easy to
remember and I'm worried about how it would interpret NaN, since I haven't heard any specific
reports of that actually being tested.
>> [_] Anonymous 01/11/21(Mon)20:12:23 No.3456690
managed to patch pepperflash for linux
on my version (md5sum b6da1630859c4f9c47c8ac26ec9c57a3) the timebomb timestamp is at 0xEB7760,
you need to change
00 00 40 46 3E 6F 77 42
to
00 00 00 00 00 00 F8 7F
