Ironically, while users were trying to get Flash from CNET to play games, security experts were begging users to remove Flash. The plugin became the single largest security hole on the web. Zero-day exploits were routine. By 2015, browsers began sandboxing Flash, then blocking it by default. Steve Jobs’ 2010 open letter, “Thoughts on Flash,” had predicted this: Flash was a closed, resource-hungry security risk. As HTML5 rose, the need to download Flash vanished. Consequently, the search query “Adobe Flash Player download CNET” shifted from a utility query to a warning sign. Clicking that result in 2016 was a gamble with your system’s integrity.
CNET, a tech media giant, hosted Download.com—a massive repository of freeware and shareware. For a user in 2005, searching “Adobe Flash Player download CNET” made logical sense. CNET offered fast mirrors, user reviews, and a veneer of legitimacy. It was the digital equivalent of a bustling bazaar: everything was available in one place, and the vendors seemed reliable. However, this convenience masked a dark turn. As the demand for Flash was nearly universal, CNET realized that the “download” button was prime digital real estate.
