Flash & Reader standalone installer links

As if Adobe Flash and Adobe Reader weren't enough of a security risk by themselves:

  • Adobe's automatic updater is next to useless at detecting Flash updates (at least if you don't reboot often).
  • They make it hard to check your Flash version unless you've bookmarked the About page. (Even then, you have to manually compare two long numbers in a tiny font to see if you're on the latest version.)
  • They require you to update Flash in IE and other browsers separately, and the update checker only seems to notice one of them (so if you don't know & remember to update both then one set of browser is left using the old version with its known security holes).
  • They try to trick you into installing some McAfee crap (Firefox), or Google Toolbar crap (Internet Explorer), unless you untick a checkbox every time you update.
  • (Seems new in Flash 11.) Whether or not you clear the McAffee/Google-Toolbar checkbox, the installer you get is byte-for-byte identical, just with a different filename. Apparently the unwanted crapware is always included in the installer now and the filename determines whether or not it is installed. (So you can't rename the installers.)
  • (Seems to have stopped for Flash 11.) They try to force you to use a pointless Download Manager which itself has had security issues and which is a similar size to the actual thing it is downloading. (The installer itself will download the latest version, and doesn't include the code itself, so there is still a download manager in a way, but it's not something that plugs into your web browser for no reason, and it makes sense to ensure you're installing the latest version even if the installer itself is older.)
  • They do provide standalone installers/updaters but they keep moving around the links (and sometimes the files themselves) in an ever-changing maze of web documents.

...ARGH!

If Adobe won't keep direct links to the standalone Flash installers/updaters in a sensible, easy-to-find place, I will:

Notes:

  • All links go to Adobe's site. I'm not trying to get you to download some dodgy Flash installer. The real thing is dodgy enough!

  • The links should be to the current stable versions. I shudder at the thought of beta versions of Flash given the state of the stable versions.

  • 64-bit installers include both the 32-bit and 64-bit versions of Flash. So you only need to download one installer (or two if you want to update both Firefox and IE) to infect update both the 32-bit and 64-bit versions of your browser with Flash.

    (Congratulations to the brilliant developers at Adobe for finally working out how to compile a 64-bit binary, other than Photoshop, about four years after 64-bit Windows became mainstream. Well done, guys! Maybe you can now feed some of that advanced expertise into making your PDF and PSD thumbnailers work without third-party fixes, eh?)

  • Do not rename the installers. The filename is significant and decides whether or not extra, unwanted, bundled crap (McAfee, Google Toolbar) is also installed.

  • The installers delete themselves after they start, so if you want to use them on multiple machines you should copy them first. I'm not sure if this is Adobe trying to be helpful or them trying to make Flash look even more like malware.

  • When they finish, the installers open a test Flash webpage in your default browser, even if the installer was for a different browser. Just another example of how Adobe do not understand that people (and the sites and software they depend on) need to use multiple browsers and keep Flash up-to-date in all of them. Ho hum!

  • Close the browser window (not just the tab, the whole browser/window) after seeing the Flash confirmation page, since the installer is stupid and launches the browser in its own elevated context and not as the user. This will result in the web browser running with full administrator rights (possibly as a completely different user, if over-the-shoulder elevation was used to launch the installer!), which is not good for your security and can also break the ability for other programs to pass URLs to the browser. You would hope that Adobe's Flash team would learn about browsers and security by now, after so many years of failure, but no.

Bonus: Direct link to Adobe Reader installers (via this thread):

If a link stops working, please let me know.