Homeland Security Warning: Disable Java in Browsers: New Zero Day Security Flaw Found

Published on January 11, 2013 By DrJBHL In Personal Computing

It’s a pretty rare event when DHS warns to disable the Java in your browser, but they have because of a Zero Day security flaw which allows infected applets to infect your computer via your browser and allow elevation of privileges to occur.

Once this occurs, your computer will no longer keep your sensitive data private.

The apps and code to do this are out in the wild, so this is not theoretical.

So… do the recommended.

How to do it:

https://www.java.com/en/download/help/disable_browser.xml

Source:

http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-zero-day-flaw-7000009713/

Comments (Page 1)

Neil Banfield

on Jan 11, 2013

I opted long ago to simply to remove Java totally as these exploits are too common.

waxplayer

on Jan 11, 2013

Neil Banfield

reply 1

I opted long ago to simply to remove Java totally as these exploits are too common.

I removed anything Java on my S box since September. Haven't had the need for it since...I think there is a thread dedicated to this roaming around???

Uvah

on Jan 11, 2013

Disabled in Firefox. Hopefully a fix is in the offing real soon.

tito_defekt

on Jan 11, 2013

First of all thanks for the heads up. Second, I got 2 questions:

1. Is this US only or worldwide?

2. If I delete java, what is an alternative software I should use, Im not really smart around computers, especially software stuff.

gmc2

on Jan 11, 2013

thanks for the heads up.

edit** me either. no java control panel

Windows 7, Vista

Click on the Start button and then click on the Control Panel option.
In the Control Panel Search enter Java Control Panel.
Click on the Java icon to open the Java Control Panel.

kona0197

on Jan 11, 2013

I just learned that I don't even have Java installed. Interesting.

DrJBHL

on Jan 11, 2013

tito_defekt

reply 4

1. Is this US only or worldwide?

2. If I delete java, what is an alternative software I should use, Im not really smart around computers, especially software stuff.

1. The net is world wide... so...

2. You don't need Java.. except in some programs/applications. You know what programs you have, so check 'em out... if you have questions about them you can ask here or on the Forums where the software was obtained...

DrJBHL

on Jan 11, 2013

kona0197

reply 6

I just learned that I don't even have Java installed. Interesting.

That's fine, kona... just make sure to disable Javascript in your browser.

DrJBHL

on Jan 11, 2013

gmc2

reply 5

thanks for the heads up.

edit** me either. no java control panel

Windows 7, Vista

Click on the Start button and then click on the Control Panel option.
In the Control Panel Search enter Java Control Panel.
Click on the Java icon to open the Java Control Panel.

You're welcome...I don't either... just disable the sucker in your browser/s.

ARESIV

on Jan 11, 2013

For Firefox I an highly recommend the addon

NoScript

It allows you to state exactly what pages may use java, flash or scripts.

For example if you visit this the current page you are looking at.

Data is loaded from:

sinsofasolarempire.com

google.com

stardock.net

stardock.com

googleanalytics.com

twitter.com

facebook.net

Now, with no Script you can allow only the Java, Flash and scripts your really want to execute.

For me that means I tell NoScript to

Allow

sinsofasolarempire.com

google.com

stardock.net

stardock.com

Allow on this page only - normaly it is blocked but on this site it is not.

googleanalytics.com

Not trustworthy - those sites are always blocked wherever you surf.

twitter.com

facebook.net

Of course the decision what sites are allowed to do what is entirely yours.

I use it for several years now and never again had any browser hijacked.

moshi

on Jan 11, 2013

DrJBHL

reply 8

Quoting kona0197, reply 6I just learned that I don't even have Java installed. Interesting.

That's fine, kona... just make sure to disable Javascript in your browser.

Javascript ≠ Java

S J N

on Jan 11, 2013

gmc2

reply 5

Windows 7, Vista

Click on the Start button and then click on the Control Panel option.

In the Control Panel Search enter Java Control Panel.

Click on the Java icon to open the Java Control Panel.

No Java Control Panel,,,what now?

Wizard1956

on Jan 11, 2013

S J N

reply 12

No Java Control Panel,,,what now?

If on Win7 look in Control Panel\Programs\Programs and Features and see if Java is installed. If it is, take whatever action you deem appropriate. If it isn't....carry on.

teddybearcholla

on Jan 11, 2013

Can it be uninstalled from the pc?

Opening the java control panel...I disabled java in the browser...but looking at that control panel, clicking on *Java* it says..."View and manage Java Runtime Versions and settings for Java applications and applets". Then clicking on "View"... I see that there is a *path* from the platform..etc. and it is "ENABLED" . Should that also be disabled?

Xiandi

on Jan 11, 2013

teddybearcholla

reply 14

Can it be uninstalled from the pc?

yes

Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:

Richer content, access to many features that are disabled for guests like commenting on the forums.
Access to a great community, with a massive database of many, many areas of interest.
Access to contests & subscription offers like exclusive emails.
It's simple, and FREE!