U.S. warns on Java software as security concerns escalate | Reuters
-
Tinderbox (UK) BAKED BEAN KING
-
No thanks. I'd rather choose to be not stupid and continue to use Java thanks.
-
I don't have Java on my Windows systems but is JS a variant of Java? I know NBR requires JS so I have to temporarily enable it or I can't access the forums.
-
-
I came across this writeup "How to be as safe as possible with Java By Michael Horowitz 1-12-2013"
See: How to be as safe as possible with Java | Computerworld Blogs
A few excerpts from it follow...
"To begin in the beginning, Java is available on Windows, OS X and Linux. The latest flaw has been shown to exist in all three systems.
Java is not available at all on iOS (iPhone, iPad) and although it plays a big part in Android, the current issue is with Java from Oracle which does not run on Android. The safest operating system, in my opinion, is Google's Chrome OS which also does not support Java.
The current Java flaw boils down to this: view a web page, get infected with a virus.
On Windows, it's worse than that. US-CERT warns that "applications that use the Internet Explorer web content rendering components, such as Microsoft Office or Windows Desktop Search, may also be used as an attack vector for this vulnerability"."
===============
"This points up an interesting point that's often overlooked - Java is used both online and offline. Much of this article, and what you'll find elsewhere online, focuses on disabling Java in web browsers, the online half of the equation. There is, as far as I know, no way to restrict the offline use of Java, that is, Java used by installed applications. Offline use is either all-on or all-off and the only way to get to all-off is to uninstall Java."
===============
"IS JAVA INSTALLED?
Windows users can easily see if Java is installed in the Control Panel. In XP look in Add or Remove Programs, on Windows 7 look in Programs and Features. On both systems look for an entry starting with Java 6 or Java 7. Most Windows systems with Java installed will also have a Java entry in the Control Panel, but this is buggy and not reliable." -
Tinderbox (UK) BAKED BEAN KING
Just got a java update today, i wonder if the problem has been fixed for now?
John. -
http://forum.notebookreview.com/off...-warnings-disable-software-2.html#post9034264
Look like I can online bank again .. safely
But I get your question John -
When using Java/JRE, make sure all remnants of previous versions are removed by using a program like JavaRa;
JavaRa is an effective way to deploy, update and remove the Java Runtime Environment (JRE). Its most significant feature is the JRE Removal tool; which forcibly deletes files, directories and registry keys associated with the JRE. This can assist in repairing or removing Java when other methods fail. link
Only one of 2 bugs has been squashed. The other one isn't directly exploitable though;
After further analysis of the Oracle Java patch (Java 7 update 11), Immunity was able to identify that only one of the two bugs were fixed, making Java still vulnerable to one of the bugs used in the exploit found in the wild.
The patch did stop the exploit, fixing one of its components. But an attacker with enough knowledge of the Java code base and the help of another zero day bug to replace the one fixed can easily continue compromising users. (Assuming they now use a signed Java applet - one of the other changes introduced in this patch.) link
NEWS - U.S. warns on Java software as security concerns escalate
Discussion in 'Security and Anti-Virus Software' started by Tinderbox (UK), Jan 12, 2013.