In article , Carlos E.R.
wrote:

The correct thing nowdays would be to have flash disabled, or have
setting to "always ask". And if asked, say "no" unless you really want
to see that box and trust the site.

the correct thing to do is not have flash installed at all.

Unless your bank uses it :-P

a bank that uses flash has no understanding of security and is putting
themselves and their customers at risk. they should not be used.