Hacker News Reader

I've seen this argument, but don't believe that removing the option for click-to-play improves security. I'd could believe this theory if the default was simulataneously changed to have Flash default to off, but as it is, the result is that more users will choose to keep the default where Flash always on. Surely automatic activation is even less secure than a potentially hijackable click-to-play?

View on HN

I don't believe the small mechanical difference in click activation actually makes a huge difference to uptake numbers, since the big leap is making the choice to have plugins not run by default, with the activation path making no noticeable difference since by then you've already filtered out most people, who just don't care about plugin activation. This feature is driven by the Chrome security/privacy teams, who would have reverted it by now if they saw a regression in usage.

Reply on news.ycombinator.com