PDA

View Full Version : Proventing the download of malious java applets ?


Bethrezen
August 30th, 2005, 07:10 PM
hi all

I’m currently using the latest build of fire fox and the latest build of java from sun micro systems and though that with the safe guards I have in place my computer would be ok but when I ran my virus scanner during a routine maintenance cycle recently a discovered that I had picked up infected java applets which surprised me because my virus scanner normally stops these before being downloaded

but somehow these managed to slip through undetected which demonstrates a small weakness in my defences which I'd like to plug

so to my question is there a security setting somewhere in either java or in ff to stop the downloading of java applets that could contain potentially malious code which could be used to breach my systems security ?

AvianFlux
August 30th, 2005, 07:30 PM
Launch Java Control Panel, delete all Java applications and applets, and set storage for both to 0MB. :)

Java will still function, however no viruses will have a place to store themselves.

ronjor
August 30th, 2005, 07:31 PM
Turn off Java while surfing the net. Best course of action. The setting is under web features in Firefox options.

Tom772
August 30th, 2005, 07:50 PM
{QUOTE-> Turn off Java while surfing the net. Best course of action. The setting is under web features in Firefox options. <-QUOTE}Ronjor do you get the same effect if it is blocked from accessing the internet through your firewall?
T

ronjor
August 30th, 2005, 07:58 PM
To be honest, I don't depend on a firewall to do that for myself. I suppose if your firewall is set up to block Java, it will.

Bethrezen
August 30th, 2005, 08:06 PM
hi

{QUOTE-> Launch Java Control Panel, delete all Java applications and applets, and set storage for both to 0MB. :) <-QUOTE}

while this isnt a bad idea coz it stops them being stored on my computer it still dosnt stop them being activated when im surfing

{QUOTE-> Turn off Java while surfing the net. Best course of action. The setting is under web features in Firefox options. <-QUOTE}

problen with this is that alot of lgit sights depend on java to operate correctley so this isnt an option really

ronjor
August 30th, 2005, 08:19 PM
Do you have any links to those sites?
I would download the adblock extension for Firefox as well as the Filterset G. extension. These may help.

WSFuser
August 30th, 2005, 09:00 PM
if u have teh latest noscript extension for firefox it can optionally (in addition to JS)block flash, java, and other plugins for untrusted sites.

AvianFlux
August 30th, 2005, 09:06 PM
{QUOTE-> hi



while this isnt a bad idea coz it stops them being stored on my computer it still dosnt stop them being activated when im surfing <-QUOTE}
Actually, Java security will prevent a virus from executing. Those settings are configured in the Java Control Panel 'Advanced' tab.

Mrkvonic
August 31st, 2005, 01:22 AM
Hi,
Are you talking about java or javascript?
People seem to have mentioned both.
Mrk

WSFuser
August 31st, 2005, 01:35 AM
java but the noscript extension i mentioned can block both.

Cursed Ghost
August 31st, 2005, 12:42 PM
hi

thanks for the link WSFuser ill check it out