PDA

View Full Version : US government advises computer users to disable Java software



joebloggs
12th January 2013, 13:32
The U.S. Department of Homeland Security is advising people to temporarily disable the Java software on their computers to avoid potential hacking attacks.

The recommendation came in an advisory issued late Thursday, following up on concerns raised by computer security experts.

Experts believe hackers have found a flaw in Java's coding that creates an opening for criminal activity and other high-tech mischief.

Java is a widely used technical language that allows computer programmers to write a wide variety of Internet applications and other software programs that can run on just about any computer's operating system.

Oracle Corp. bought Java as part of a $7.3 billion acquisition of the software's creator, Sun Microsystems, in 2010.

Oracle, which is based in Redwood Shores, Calif., had no immediate comment late Friday.

Read more: http://www.foxnews.com/tech/2013/01/12/us-government-advises-computer-users-to-disable-java-software/#ixzz2HlQYMONR

tone
12th January 2013, 14:40
I was just going to post this up, many people dont really appreciate that JAVA and Adobe Flash require updates only because some hacker finds a security flaw that allows them to take control of machines with that flaw in it.
So if your PC doesnt get the updates on a regular basis - whilst connected to the internet that PC becomes someones "bitch" and your PC/IP address could end up helping a remote attcker use your PC to attack someone else or just simply rip you and your ID off.

so pretty important people take heed of this - I for one have disabled java for now.

Tone

grahamw48
12th January 2013, 15:42
Will it stop my youtube running properly ? :Erm:

Terpe
12th January 2013, 16:30
How do you disable / enable Java?

grahamw48
12th January 2013, 16:40
Well, I just went to my Mozilla (tools) add-ons, to disable it. Even there it tells you (next to the add-on) that there is a security risk with Java now.

Needless to say...now disabled.

imagine
12th January 2013, 17:11
have disabled mine on firefox, but not sure how on google chrome and ie browsers

grahamw48
12th January 2013, 17:26
Sorry Stewart...can't help there, as I've just this minute removed google chrome from my computer, as I hardly ever use it. :doh

Maybe just ask the question on google search ?

imagine
12th January 2013, 17:28
think iv got it for google chrome

settings, then did search for java,then clic tab for content settings, then on java script , then selected,,,Do not allow any site to run JavaScript, then scrolled down to plug ins,, then clicked on disable individual plug ins, scrolled down to java (tm) and disabled, just thinking might be easier just to delete java completly?

just incase its a help for anyone, im pretty sure what iv done disables java in google,
if anyone knows if im wrong please say

imagine
12th January 2013, 17:31
Sorry Stewart...can't help there, as I've just this minute removed google chrome from my computer, as I hardly ever use it. :doh

Maybe just ask the question on google search ?

think iv got it, i prefer google chrome for most my browsing,so dont realy want to delete it, but also use firefox and sometimes ie

imagine
12th January 2013, 17:36
ahhh now i cant watch youtube vids

les_taxi
12th January 2013, 17:36
We are talking about java not javascript,totally separate.
I have uninstalled java for now and use chrome :xxgrinning--00xx3:

les_taxi
12th January 2013, 17:37
Imagine re-enable javascript:smile:

les_taxi
12th January 2013, 17:46
Just to clarify Do not remove Javascript!
Only remove Java if you are worried-you may not have it installed anyway.

imagine
12th January 2013, 17:55
Imagine re-enable javascript:smile:

thanks les
iv re enabled java script,

and left java plug in disabled, reads as below, am i correct


Java(TM) (2 files) - Version: 10.9.2.05 (Disabled)
Next Generation Java Plug-in 10.9.2 for Mozilla browsers
Name: Java(TM) Platform SE 7 U9
Description: Next Generation Java Plug-in 10.9.2 for Mozilla browsers
Version: 10.9.2.05
Location: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
Type: NPAPI
Enable
MIME types:
MIME type Description File extensions
application/x-java-applet Java Applet
application/x-java-bean JavaBeans
application/x-java-vm
application/x-java-applet;version=1.1.1
application/x-java-bean;version=1.1.1
application/x-java-applet;version=1.1
application/x-java-bean;version=1.1
application/x-java-applet;version=1.2
application/x-java-bean;version=1.2
application/x-java-applet;version=1.1.3
application/x-java-bean;version=1.1.3
application/x-java-applet;version=1.1.2
application/x-java-bean;version=1.1.2
application/x-java-applet;version=1.3
application/x-java-bean;version=1.3
application/x-java-applet;version=1.2.2
application/x-java-bean;version=1.2.2
application/x-java-applet;version=1.2.1
application/x-java-bean;version=1.2.1
application/x-java-applet;version=1.3.1
application/x-java-bean;version=1.3.1
application/x-java-applet;version=1.4
application/x-java-bean;version=1.4
application/x-java-applet;version=1.4.1
application/x-java-bean;version=1.4.1
application/x-java-applet;version=1.4.2
application/x-java-bean;version=1.4.2
application/x-java-applet;version=1.5
application/x-java-bean;version=1.5
application/x-java-applet;version=1.6
application/x-java-bean;version=1.6
application/x-java-applet;version=1.7
application/x-java-bean;version=1.7
application/x-java-applet;jpi-version=1.7.0_09
application/x-java-bean;jpi-version=1.7.0_09
application/x-java-vm-npruntime
application/x-java-applet;deploy=10.9.2
application/x-java-applet;javafx=2.2.3
Name: Java Deployment Toolkit 7.0.70.10
Description: NPRuntime Script Plug-in Library for Java(TM) Deploy
Version: 10.7.2.10
Location: C:\Windows\SysWOW64\npDeployJava1.dll
Type: NPAPI
Enable
MIME types:
MIME type Description File extensions
application/java-deployment-toolkit

les_taxi
12th January 2013, 18:04
Well if you can see you tube videos now your fine:xxgrinning--00xx3:
You possibly don't even have Java runtime on your pc:xxgrinning--00xx3:

grahamw48
12th January 2013, 18:07
My youtube is running fine too, and Java disabled in Firefox. :xxgrinning--00xx3:

imagine
12th January 2013, 18:09
Well if you can see you tube videos now your fine:xxgrinning--00xx3:
You possibly don't even have Java runtime on your pc:xxgrinning--00xx3:

thanks les, yes videos working now, java runtime mmm not sure, presume if i have theres no need to disable this?

have in programs ,java 7 update 9 and java fx 2.1.1

les_taxi
12th January 2013, 18:18
Aha you have Java just disable or uninstall it,thats the program we are talking about.
Have to go to work now will look in later:xxgrinning--00xx3:

imagine
12th January 2013, 20:26
Aha you have Java just disable or uninstall it,thats the program we are talking about.
Have to go to work now will look in later:xxgrinning--00xx3:

thanks les all done and dusted, videos working again just java itself disabled in google chrome and firfox:xxgrinning--00xx3:

Terpe
12th January 2013, 21:31
Mine's now disabled.
I think.
I followed Grahams advice and looked into internet tools ---manage add-ons and then disabled Java (both of them :Erm:)

Dedworth
12th January 2013, 21:42
Thanks Joe & Tone - I've uninstalled it from our comps. Better safe than sorry

raynaputi
12th January 2013, 22:23
What you need to know about the Java exploit.

http://krebsonsecurity.com/2013/01/what-you-need-to-know-about-the-java-exploit/

raynaputi
12th January 2013, 22:32
Also, here's the link on how to disable Java in all platforms and browsers..

http://java.com/en/download/help/disable_browser.xml

grahamw48
13th January 2013, 00:44
Thanks Rayna...very interesting and useful. :xxgrinning--00xx3:

Terpe
13th January 2013, 09:46
Also, here's the link on how to disable Java in all platforms and browsers..

http://java.com/en/download/help/disable_browser.xml

Thankyou Rayna :xxgrinning--00xx3:

I read there that the only way to disable Java was via that Java Control Panel.

But, under the security tab I only have a sentence about certificates. It doesn't look anything like the Control panel in the instruction and no way to de-select.

Any ideas? Anyone?

raynaputi
13th January 2013, 10:27
Thankyou Rayna :xxgrinning--00xx3:

I read there that the only way to disable Java was via that Java Control Panel.

But, under the security tab I only have a sentence about certificates. It doesn't look anything like the Control panel in the instruction and no way to de-select.

Any ideas? Anyone?

I have the same issue as yours Terpe. But that's because you have a previous version of Java. I still have version 6 update 37. The exploit issue is from Java version 7 update 10. Check for what version you have.

Terpe
13th January 2013, 10:38
I have the same issue as yours Terpe. But that's because you have a previous version of Java. I still have version 6 update 37. The exploit issue is from Java version 7 update 10. Check for what version you have.

Ah, yes. I have version 6 update 37 also.

Thanks. :xxgrinning--00xx3:

grahamw48
13th January 2013, 10:45
I have completely uninstalled Java (7) from my PC. So far no adverse effects noticed. I'll wait until this problem has been fixed and then download it again if needed. :smile:

les_taxi
13th January 2013, 10:49
Thankyou Rayna :xxgrinning--00xx3:

I read there that the only way to disable Java was via that Java Control Panel.

But, under the security tab I only have a sentence about certificates. It doesn't look anything like the Control panel in the instruction and no way to de-select.

Any ideas? Anyone?
Yes just completly uninstall it,remember it's not javascript we are talking about it's java,so go to start,control panel,add/remove progs and uninstall java:xxgrinning--00xx3:

Terpe
13th January 2013, 11:13
Yes just completly uninstall it,remember it's not javascript we are talking about it's java,so go to start,control panel,add/remove progs and uninstall java:xxgrinning--00xx3:

I'll give it a try and see what happens.