Ramblings of an old Doc

 

It’s a pretty rare event when DHS warns to disable the Java in your browser, but they have because of a Zero Day security flaw which allows infected applets to infect your computer via your browser and allow elevation of privileges to occur.

Once this occurs, your computer will no longer keep your sensitive data private.

The apps and code to do this are out in the wild, so this is not theoretical.

So… do the recommended.

How to do it:

https://www.java.com/en/download/help/disable_browser.xml

Source:

http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-zero-day-flaw-7000009713/


Comments (Page 4)
6 PagesFirst 2 3 4 5 6 
on Jan 14, 2013

Both were 64 bit. I save all installer packages for back up reasons, I just forgot it was there. Thing is Java notifies me of all updates. I do not allow automatic updates because I got burnt once by that. Not gonna happen again! The only app I have that I allow auto updates is Threatfire and I have never had a problem with that. Been using it for over a year now. So far everything on my laptop works just fine without Java installed. So it really isn't necessary to keep it. One less thing to worry about.

on Jan 14, 2013

very strange.. because they (both sun and oracle) deliberately don't do autoupdate for 64bit java. (unless you mean there's some sort of email notice....)

remember... just because your os is 64bit doesn't mean your java is 64bit. in fact... most browsers aren't even 64bit and won't be able to use 64bit java plugins anyway.

 

---

and i don't mean installer packages..

back when, your java folder will have a load of subfolders, 1 for each update. crazy stuff. something about keeping backward compatibility or some such..

on Jan 14, 2013

I strongly recommend Msft's EMET [Microsoft Enhanced Mitigation Experience Toolkit] (currently v3.5) for all those whom wish to more-fully secure their online activities

no advanced knowledge required just import stock protection profile that's fully supported (the documentation is included if it doesn't sound straightforward, it really is I think)

 

   ...for those of you still rocking XP for some insane reason (other than to code updates for GC2 of course!!) checkout wehntrust from codeplex to supplement emet's limitations because of nt5's age

on Jan 14, 2013

 I get a popup when Java says there's an update, no email. I get emails from CCleaner and Glary Utilities and FF, all from cnet which I try to stay away from because of all the bloat they tack onto stuff. When I do update anything I go to the website and dl from there.

on Jan 14, 2013

some insane reason

Other than financial and the inconvenient truth that XP works just fine for the average user?

on Jan 14, 2013

DrJBHL
Other than financial and the inconvenient truth that XP works just fine for the average user?

Thank you.

on Jan 14, 2013

DrJBHL

Quoting Uvah, reply 49some insane reason

Other than financial and the inconvenient truth that XP works just fine for the average user?

I think you got the replys mixed up. lol

 

on Jan 14, 2013

I think you got the replys mixed up. lol

Ya it does that sometimes.  Don'tChaHateItWhenThatHappens?

on Jan 14, 2013

No, Uvah... that's just the way the stupid quote thing works.... or doesn't. It automatically quotes the first person when it's the second that's intended.

Either way.... 

on Jan 14, 2013

 I get a popup when Java says there's an update, no email.

 

which is why i think that java you had was 32bit. as mentioned, there's no such thing as 64bit autoupdate (allegedly unless you fiddled around with it...)

on Jan 14, 2013

My daughter has Java and she also has JavaFX2.1.1 .  The second one I've never heard mentioned.  She has Windows7. 

on Jan 14, 2013

JavaFX is a Sun Java 'extension' that appears to be something that a developer might use and would have to be actively sought and downloaded.  It's not part of 'regular' Java.

on Jan 14, 2013

Thank you Daiwa.  I have no idea why it is on her pc, I don't think she does either. 

on Jan 14, 2013

Barb, if your daughter downloaded and installed the Java Software development kit instead of the Jave Runtime Environment than it would come with JavaFX. I would recommend that she uninstall all things Java and then download and install JRE 7.11. I know I have a couple of old games that require Java on my machine to run. It can still be disabled in the browser if you are concerned about safety.

You can get the scoop on JavaFX here: http://docs.oracle.com/javafx/2/overview/jfxpub-overview.htm

on Jan 14, 2013

Thank you very much Frankie!! I will tell her! 

6 PagesFirst 2 3 4 5 6