US government advises computer users to disable Java software

[joebloggs]

The U.S. Department of Homeland Security is advising people to temporarily disable the Java software on their computers to avoid potential hacking attacks.

The recommendation came in an advisory issued late Thursday, following up on concerns raised by computer security experts.

Experts believe hackers have found a flaw in Java's coding that creates an opening for criminal activity and other high-tech mischief.

Java is a widely used technical language that allows computer programmers to write a wide variety of Internet applications and other software programs that can run on just about any computer's operating system.

Oracle Corp. bought Java as part of a $7.3 billion acquisition of the software's creator, Sun Microsystems, in 2010.

Oracle, which is based in Redwood Shores, Calif., had no immediate comment late Friday.

Read more: http://www.foxnews.com/tech/2013/01/...#ixzz2HlQYMONR

[tone]

I was just going to post this up, many people dont really appreciate that JAVA and Adobe Flash require updates only because some hacker finds a security flaw that allows them to take control of machines with that flaw in it.
So if your PC doesnt get the updates on a regular basis - whilst connected to the internet that PC becomes someones "bitch" and your PC/IP address could end up helping a remote attcker use your PC to attack someone else or just simply rip you and your ID off.

so pretty important people take heed of this - I for one have disabled java for now.

Tone

[grahamw48]

Will it stop my youtube running properly ?

[Terpe]

How do you disable / enable Java?

[grahamw48]

Well, I just went to my Mozilla (tools) add-ons, to disable it. Even there it tells you (next to the add-on) that there is a security risk with Java now.

Needless to say...now disabled.

[imagine]

have disabled mine on firefox, but not sure how on google chrome and ie browsers

[grahamw48]

Sorry Stewart...can't help there, as I've just this minute removed google chrome from my computer, as I hardly ever use it.

Maybe just ask the question on google search ?

[imagine]

think iv got it for google chrome

settings, then did search for java,then clic tab for content settings, then on java script , then selected,,,Do not allow any site to run JavaScript, then scrolled down to plug ins,, then clicked on disable individual plug ins, scrolled down to java (tm) and disabled, just thinking might be easier just to delete java completly?

just incase its a help for anyone, im pretty sure what iv done disables java in google,
if anyone knows if im wrong please say

[imagine]

Sorry Stewart...can't help there, as I've just this minute removed google chrome from my computer, as I hardly ever use it.

Maybe just ask the question on google search ?

think iv got it, i prefer google chrome for most my browsing,so dont realy want to delete it, but also use firefox and sometimes ie

[imagine]

ahhh now i cant watch youtube vids

[les_taxi]

We are talking about java not javascript,totally separate.
I have uninstalled java for now and use chrome

[les_taxi]

Imagine re-enable javascript

[les_taxi]

Just to clarify Do not remove Javascript!
Only remove Java if you are worried-you may not have it installed anyway.

[imagine]

Imagine re-enable javascript

thanks les
iv re enabled java script,

and left java plug in disabled, reads as below, am i correct


Java(TM) (2 files) - Version: 10.9.2.05 (Disabled)
Next Generation Java Plug-in 10.9.2 for Mozilla browsers
Name: Java(TM) Platform SE 7 U9
Description: Next Generation Java Plug-in 10.9.2 for Mozilla browsers
Version: 10.9.2.05
Location: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
Type: NPAPI
Enable
MIME types:
MIME type Description File extensions
application/x-java-applet Java Applet
application/x-java-bean JavaBeans
application/x-java-vm
application/x-java-applet;version=1.1.1
application/x-java-bean;version=1.1.1
application/x-java-applet;version=1.1
application/x-java-bean;version=1.1
application/x-java-applet;version=1.2
application/x-java-bean;version=1.2
application/x-java-applet;version=1.1.3
application/x-java-bean;version=1.1.3
application/x-java-applet;version=1.1.2
application/x-java-bean;version=1.1.2
application/x-java-applet;version=1.3
application/x-java-bean;version=1.3
application/x-java-applet;version=1.2.2
application/x-java-bean;version=1.2.2
application/x-java-applet;version=1.2.1
application/x-java-bean;version=1.2.1
application/x-java-applet;version=1.3.1
application/x-java-bean;version=1.3.1
application/x-java-applet;version=1.4
application/x-java-bean;version=1.4
application/x-java-applet;version=1.4.1
application/x-java-bean;version=1.4.1
application/x-java-applet;version=1.4.2
application/x-java-bean;version=1.4.2
application/x-java-applet;version=1.5
application/x-java-bean;version=1.5
application/x-java-applet;version=1.6
application/x-java-bean;version=1.6
application/x-java-applet;version=1.7
application/x-java-bean;version=1.7
application/x-java-applet;jpi-version=1.7.0_09
application/x-java-bean;jpi-version=1.7.0_09
application/x-java-vm-npruntime
application/x-java-applet;deploy=10.9.2
application/x-java-applet;javafx=2.2.3
Name: Java Deployment Toolkit 7.0.70.10
Description: NPRuntime Script Plug-in Library for Java(TM) Deploy
Version: 10.7.2.10
Location: C:\Windows\SysWOW64\npDeployJava1.dll
Type: NPAPI
Enable
MIME types:
MIME type Description File extensions
application/java-deployment-toolkit

[les_taxi]

Well if you can see you tube videos now your fine
You possibly don't even have Java runtime on your pc

[grahamw48]

My youtube is running fine too, and Java disabled in Firefox.

[imagine]

Well if you can see you tube videos now your fine
You possibly don't even have Java runtime on your pc

thanks les, yes videos working now, java runtime mmm not sure, presume if i have theres no need to disable this?

have in programs ,java 7 update 9 and java fx 2.1.1

[les_taxi]

Aha you have Java just disable or uninstall it,thats the program we are talking about.
Have to go to work now will look in later

[imagine]

Aha you have Java just disable or uninstall it,thats the program we are talking about.
Have to go to work now will look in later

thanks les all done and dusted, videos working again just java itself disabled in google chrome and firfox

[Terpe]

Mine's now disabled.
I think.
I followed Grahams advice and looked into internet tools ---manage add-ons and then disabled Java (both of them )

[Dedworth]

Thanks Joe & Tone - I've uninstalled it from our comps. Better safe than sorry

[raynaputi]

What you need to know about the Java exploit.

http://krebsonsecurity.com/2013/01/w...-java-exploit/

[raynaputi]

Also, here's the link on how to disable Java in all platforms and browsers..

http://java.com/en/download/help/disable_browser.xml

[grahamw48]

Thanks Rayna...very interesting and useful.

[Terpe]

Also, here's the link on how to disable Java in all platforms and browsers..

http://java.com/en/download/help/disable_browser.xml

Thankyou Rayna

I read there that the only way to disable Java was via that Java Control Panel.

But, under the security tab I only have a sentence about certificates. It doesn't look anything like the Control panel in the instruction and no way to de-select.

Any ideas? Anyone?

[raynaputi]

Thankyou Rayna

I read there that the only way to disable Java was via that Java Control Panel.

But, under the security tab I only have a sentence about certificates. It doesn't look anything like the Control panel in the instruction and no way to de-select.

Any ideas? Anyone?

I have the same issue as yours Terpe. But that's because you have a previous version of Java. I still have version 6 update 37. The exploit issue is from Java version 7 update 10. Check for what version you have.

[Terpe]

I have the same issue as yours Terpe. But that's because you have a previous version of Java. I still have version 6 update 37. The exploit issue is from Java version 7 update 10. Check for what version you have.

Ah, yes. I have version 6 update 37 also.

Thanks.

[grahamw48]

I have completely uninstalled Java (7) from my PC. So far no adverse effects noticed. I'll wait until this problem has been fixed and then download it again if needed.

[les_taxi]

Thankyou Rayna

I read there that the only way to disable Java was via that Java Control Panel.

But, under the security tab I only have a sentence about certificates. It doesn't look anything like the Control panel in the instruction and no way to de-select.

Any ideas? Anyone?

Yes just completly uninstall it,remember it's not javascript we are talking about it's java,so go to start,control panel,add/remove progs and uninstall java

[Terpe]

Yes just completly uninstall it,remember it's not javascript we are talking about it's java,so go to start,control panel,add/remove progs and uninstall java

I'll give it a try and see what happens.