But how can attack over Adobe Flash still works when Flash is disabled by default on FF and Chrome?