"Java exploit: security experts warn of malware flaw"

**QIII** · August 30th, 2012

Nothing like in internationally embarrassing ****-whoopin' to motivate.

**vexorian** · August 30th, 2012

Hence why I believe full disclosure is always the better answer.

**Gremlinzzz** · August 31st, 2012

Originally Posted by sammiev

The fix has been released and I'm running since earlier today. 7u7 is out and working good.

Thanks problem solved.

**lisati** · August 31st, 2012

Originally Posted by sammiev

The fix has been released and I'm running since earlier today. 7u7 is out and working good.

I noticed what appeared to be a java-related update come through earlier today. Having said that, it's not an excuse to dumb down the care you'd normally take while surfing.

**3rdalbum** · August 31st, 2012

Java needs to be binned, desperately. IIRC, early versions of Java had a documented feature where you could modify the contents of RAM - anywhere in the system - from within a Java application or applet. How dumb is that?

There have been countless Java vulnerabilities discovered on every platform that Java runs on; it's like Internet Explorer 6, except non-Windows users are also at risk.

Get rid of Java permanently.

**QIII** · August 31st, 2012

Unfortunately, Java is ubiquitous.

**fleamour** · August 31st, 2012

Am I safe?

I disabled Iced Tea but nearly every site I visit requires some form of Java, so keep adding exceptions.

**BigCityCat** · August 31st, 2012

I don't have Java installed and I do not notice it at all. I also have noscript installed. Apparmor firefox profile enabled and outbound firewall rules established. Why not right?

**fleamour** · August 31st, 2012

I uninstalled Iced Tea completely under synaptic. No longer shows in chrome://plugins/ but under chrome://chrome/settings/content#java
unless Allow all sites to run JavaScript (recommended) is ticked, nearly every site complains.

I am confused.

**1clue** · August 31st, 2012

Originally Posted by 3rdalbum

Java needs to be binned, desperately. IIRC, early versions of Java had a documented feature where you could modify the contents of RAM - anywhere in the system - from within a Java application or applet. How dumb is that?

There have been countless Java vulnerabilities discovered on every platform that Java runs on; it's like Internet Explorer 6, except non-Windows users are also at risk.

Get rid of Java permanently.

I can see where you're coming from from the client side, but a whole lot of enterprise server-side software uses Java or some language that runs on the JVM. Really tough to eradicate that.

Thread: "Java exploit: security experts warn of malware flaw"

Thread Tools

Display

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Re: "Java exploit: security experts warn of malware flaw"

Bookmarks

Bookmarks

Posting Permissions