Skip to content
Deepak Gupta markTech Graveyard

Tech Graveyard/infrastructure

Adobe Flash (1996-2020)

Flash powered most of the early interactive internet. By 2020 it was a security disaster the industry could no longer tolerate. The plugin model died with it.

Born 1996 · Died 2020 · Status: dead

Certificate of Death

Name of decedent

Adobe Flash

Born
1996
Died
2020
Age
24

Cause of death

Steve Jobs's 2010 Thoughts on Flash, HTML5 video, and accumulated security vulnerabilities

Survived by

HTML5, WebAssembly, modern JavaScript, native video and animation APIs

Invented by

FutureWave Software (FutureSplash, 1996), acquired by Macromedia, then Adobe

Status: DeadFinal breath: 2020

Filed by D. Gupta · guptadeepak.com

The hook

Adobe ended Flash on December 31, 2020. By 2010 the writing was on the wall thanks to Steve Jobs's Thoughts on Flash letter. The 10-year retirement runway was unusually long because the cleanup was unusually hard.

Thesis. Flash died because the browser plugin model died. Plugins ran with full user-level permissions, bypassed browser security sandboxes, and aged into a permanent CVE pipeline. The replacement model (native browser APIs with sandboxed origin policies) is fundamentally more secure. Flash's death is the death of 'trust the plugin.'

The story

The origin

1996. FutureWave released FutureSplash Animator. Macromedia acquired it in November 1996 and rebranded as Flash. The web got animation, vector graphics, and eventually video and games inside a browser plugin.

The peak

2005 to 2010. Flash powered YouTube video, browser games, interactive ads, and complex web applications. Roughly 99% of desktop browsers had Flash installed. Adobe acquired Macromedia in December 2005 and inherited the dominant runtime.

The Jobs letter

April 29, 2010. Steve Jobs published Thoughts on Flash, refusing to support it on iOS. The mobile web pivoted to HTML5 video and canvas. Adobe insisted Flash would come to mobile. It briefly did on Android. It quickly died there too.

The security disaster

2010 to 2017. Hundreds of CVEs. Flash became one of the most-exploited consumer software runtimes in the world. The 2015 Hacking Team breach published more zero-days. Browsers started click-to-play and then default-blocking Flash content.

The retirement

July 2017 Adobe announced end-of-life. December 31, 2020 Flash final shutdown. Major browsers removed support entirely. The Internet Archive and the Ruffle emulator preserve some Flash content but cannot replay the entire corpus.

Key data points

  • FutureSplash Animator: 1996
  • Macromedia acquires FutureSplash: November 1996
  • Adobe acquires Macromedia: December 2005
  • Steve Jobs's Thoughts on Flash: April 29, 2010
  • Adobe announces Flash end-of-life: July 2017
  • Flash final shutdown: December 31, 2020

Contrarian angle

The cybersecurity community often celebrates Flash's death as a win. The harder truth is that Flash's death broke a generation of educational content, browser games, and creative work that was never preserved. The Flash files exist. The runtime to play them does not. We celebrated security while losing culture. The Ruffle project is trying to recover some of it, but most of the corpus is dark.

The flip side

What replaces it

The paired prediction in Future Tech.

Read the prediction

FAQ

Can old Flash content still be viewed?

Some of it, via the Ruffle emulator (an open-source Flash Player reimplementation in Rust) or via Flashpoint Archive. Coverage is partial; complex ActionScript 3 content is the hardest to replay.

What replaced Flash for interactive web content?

HTML5 canvas and WebGL for graphics. HTML5 video for playback. JavaScript and WebAssembly for logic. The replacement is a stack of standards rather than a single runtime.

Why did Flash have so many security vulnerabilities?

It was a large, native-code runtime parsing untrusted content with permissions outside the browser sandbox. The attack surface was enormous and the architecture made wholesale fixes nearly impossible.

Was the Steve Jobs letter the real cause of Flash's death?

It was the inflection point. The technical case against Flash existed for years. Jobs put it on a public stage in a way that gave the industry permission to move.

What is Ruffle?

An open-source Flash Player emulator written in Rust, designed for safe playback of legacy SWF content in modern browsers. It is the closest thing to a successor runtime, though coverage is incomplete.

More from guptadeepak.com

Want the technical deep-dive on what replaces this?

Read the companion article

Related obituaries

More from the infrastructure graveyard.