Dangerous vulnerability in latest Java version

[sbire]

The latest Java version, Java 7 Update 10 contains a critical security vulnerability which is reportedly already being used for large scale cyberattacks. Users who have Java installed on their computers should deactivate the Java plugin in their browsers without delay.

 

...

http://www.h-online.com/security/news/item/Dangerous-vulnerability-in-latest-Java-version-1781156.html

[Blargh!]

What if you haven't updated Java for at least ~3 months?

 

edit: Btw, that's a serious question, I have no idea if that's an update for my browser or my Eclipse JDK thing.

[sbire]

great question

[CanShield]

The issue remains even with Oracle's Java Runtime Environment (JRE) 7 update. They do not know what gaping security holes they missed. Not forgetting the fact Oracle had to have the current known issues pointed out to them.

 

I am flabbergasted that they vainly flaunt that over 9 billion devices utilize their software, yet security holes are overlooked; an additional issue is interrelated software security flaws.

 

To quote Scotty.

 

"The more they overthink the plumbing, the easier it is to stop up the drain."

[Duoleb The Chosen]

i have 2 javas here, JRE6 update 37 and JRE7 Update 5(64 bits)

[Ark of Truth]

Solution: NoScript

 

If you disable Java you won't be able to view almost any webpage on the internet.

[sbire]

Solution: NoScript

 

If you disable Java you won't be able to view almost any webpage on the internet.

 

sry i can't follow that meaning.... i use noscript and atm no java.

and it works fine..... all my websites are still working. youtube, nexus, loverslab, amazon some newspages etc. pp.

atm i still need java to play minecraft, only.

 

okay i dosn't use facebook and there games as a pourposal.

[Sarnaath]

If you disable Java you won't be able to view almost any webpage on the internet.

 

I removed java from most of my computers and my laptop over a year ago and have yet to run across a webpage I can't view. I don't play browser based games (but otherwise FB works fine) and some sites like Nvidia won't automatically search drivers for you. But that's extremely minor. I got rid of java for reasons unrelated to the current security concerns, and the only reason I have it installed on my one gaming computer at all is for TES4Gecko. I'm just surprised by this comment as my experience w/o java is exactly the opposite.

[Captain Cobra]

If you disable Java you won't be able to view almost any webpage on the internet.

 

 

 

You're not serious, are you?

[leddis3]

Solution: NoScript

 

If you disable Java you won't be able to view almost any webpage on the internet.

 

I don't have Java on my main PC.

There's a difference between having Java on your system and allowing websites to execute java script from their end, and even then it will only block certain functions if you don't.

[Guest Lady Luck]

If you disable Java you won't be able to view almost any webpage on the internet.

 

 

 

You're not serious' date=' are you?

[/quote']

 

hes right , over 98% web pages today rely on javascript if you disable total plugin it will disable entire page, i did that >.>.

 

anyway about the java controversy the attacks usually on hack forums, hackers and spyware hiding on java script ....

[Ark of Truth]

Just use NoScript and it's solved. I really don't see what the issue is over this security threat.

[Sarnaath]

hes right ' date=' over 98% web pages today rely on javascript

[/quote']

 

Javascript is not java. The vulnerability was in java. Removing java from your computer doesn't affect javascript or your ability to view web pages.

[Guest Lady Luck]

hes right ' date=' over 98% web pages today rely on javascript

[/quote']

 

Javascript is not java. The vulnerability was in java. Removing java from your computer doesn't affect javascript or your ability to view web pages.

 

thanks for that info , because i'm not really expert on java , but i do get viruses from that , when i disabled it , it disabled the entire page and forces me to reinstall the browser , u wanna know whats funny i found several viruses like worm and spyware detected on my kaspersky its really scary , excuse me for having blonde moment "Durrrhh" >.<

[CanShield]

I apologize, for the lack of follow up information. Java/Oracle has been very evasive regarding information, so verifying information to resolve; or work around this issue has been time consuming.

 

One option is to verify you security software provider has already taken steps to be immune from the known vulnerabilities. Now yes that leaves you open to other unknown vulnerabilities, but that is a norm in regards to computers.

 

Second option if your still concerned is to use a virtual browser. Check out Browser Sandbox it is a plugin that makes running a virtual browser simple.

 

Lastly their is no complete alternative that does not lead to other issues. This really shows what a stranglehold Oracle has on the electronics industry.