||unity-dev|| FYI: Flash Player 9, 0, 115, 0 security hardening can break U2 and other socket server sites!

Thanks for the info Jayson.  I hadn't looked at the new release notes on the
new Flash player so this was interesting news to say the least.  It looks
like in reality a person might as well run their socket server on port 843
from now on and serve the policy file through it, then allow the connection
on that same port or else you have to run two instances of a socket server
or one that can use multiple ports.  The document seems to indicate that in
phase two if a firewall is blocking you well then your out of luck.
Probably makes sense to have a "Policy Server" now and then the actual
"Socket Server".


Chad


On Dec 20, 2007 11:21 AM, Discussion list for Unity developers. <
unity-dev at moock.org> wrote:

> www.adobe.com/devnet/flashplayer/articles/fplayer9_security_04.html (the
> whole article is a must-read, but, this is the critical page)
>
> Flash Player 9,0,115,0 introduces new security measures that cause a flash
> SWF running in it to "make contact" via PORT 843 during xmlsocket
> connections!