Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd rather use the newest version, and (starting from Chromium 35, I believe) you can only use Pepper Flash. BUT I'd rather avoid closed source software as that implies a security risk if the code isn't under public scrutiny.

Am I correct?

share|improve this question
You may want to read this paper:… – Richard Apr 6 '14 at 19:39
@EVERYONE is there any full featured open source alternative? If not what is the best alternative? – fdsfgdsdf Apr 6 '14 at 20:14
Ok, so, by extension, you don't trust the doc(x) format because it isn't opensource, the same with the Flash video codec which the Pepperflash plugin reproduce, etc? – Braiam Apr 7 '14 at 2:24
@Braiam I actually dont trust open-source either until I havent reviewed it.I juts trust it more though. – fdsfgdsdf Apr 7 '14 at 7:14

Being open source does not necessarily mean the code is going to be scrutinized by the public, or that it will be fully audited and properly scrutinized, even if it is. It simply means that it can be.

For Flash, you don't have much choice. There are some open source Flash plug-ins, but a very large number of sites just won't work in them, as the sites will require much newer versions of Flash. Whether you are using the Pepper based plug-in that Google builds in Chrome (Chromium is open source and will not include the Flash plug-in), or the last supported version of the Adobe Flash plug-in that is available, you are still using proprietary software. The only true way to not use proprietary software is to not use Flash at all.

share|improve this answer

No, Pepper Flash isn't unsafe because it isn't open source. Google is investing a lot of resources to work on Pepper Flash and keep it safe and secure. The software model is a very secure one and you shouldn't worry about using it.

In fact, the alternative open-source Flash players, Gnash and Lightspark, probably won't be any more secure than Pepper Flash.

If you want to stay as open source as possible and still retain a lot of functionality, Chromium is the way to go.

share|improve this answer
@searchofgold6789 Why would one trust google? – fdsfgdsdf Apr 6 '14 at 22:54
Shumway is getting very good. and it is subject to the security restrictions imposed by JavaScript sandboxes. – strugee Apr 7 '14 at 2:46
@strugee feel free to edit away – Richard Apr 7 '14 at 17:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.