New Java security hole affects desktops and servers

Discussion in 'other security issues & news' started by ronjor, Apr 23, 2013.

Thread Status:
Not open for further replies.
  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,798
    Location:
    Texas
  2. ght1

    ght1 Guest

    I uninstalled Java about a year ago, I don't miss it at all. :D
     
  3. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,798
    Location:
    Texas
    They just can't seem to get it right. :(
     
  4. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    If Java wasn't so widely used, it would have died a long time ago.
     
  5. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    That's for sure
     
  6. guest

    guest Guest

    If they ever made it right, the end of the world is probably pretty close. :argh:

    I don't see it's so much used, except for some YouTube downloader websites and some emulators. :doubt:
     
  7. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    Sadly, that isn't always the case.

    I recently learned, for example, about a very popular game that absolutely requires Java (in the PC): Minecraft.

    And some popular software, such as LibreOffice and OpenOffice, require Java for some non-essential functions (but apparently, their developers are trying to reduce the Java dependency with every new release).
     
  8. guest

    guest Guest

    Awww yeeeaah, I forgot about that while I'm quite familiar with that game. Shameful GZ, shameful. :thumbd:

    Too bad Libre & OpenOffice use Java, they're gonna be excellent choices if it's not because of that (from the security point of view).
     
  9. ProTruckDriver

    ProTruckDriver Registered Member

    Joined:
    Sep 18, 2008
    Posts:
    769
    Location:
    "Here on Wilders"
    They need to start from the ground up with Java, then maybe they'll get it right. Hopefully.
     
  10. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
  11. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    A lot of companies use Java independent applications, that's why it's so widely used.
     
  12. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Large organizations do use many Java dependent applications in various environments.

    On stand-alone home PC's, the requirement for Java is rarely required.

    I no longer deploy Java on home PC's due to the security risks.

     
  13. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,469
  14. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,469
  15. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,985
    Location:
    Canada
    Well the minecraft example given in this thread certainly applies to to our household.
     
  16. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,700
    Just looking at java code, you know it's a language that shouldn't be.
    Mrk
     
  17. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
    lol, mine too.

    But I have it installed for other reasons on my machine.. I've seen a good number of hardware devices that require it or benefit from it. Such as my Synology NAS box, when using java, allows some nice "shortcuts" that happen from the browser -convenience. I have an hp blade server that requires java for the remote console. Seen a few other devices with similar requirements. If it weren't for this, I would not have it on my machine... but my kids, that darn minecraft ;)

    Sul.
     
  18. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,985
    Location:
    Canada
    Yep, that darn minecraft gave me some grief creating firewall and AppLocker rules for it :D
     
  19. new2security

    new2security Registered Member

    Joined:
    Aug 8, 2008
    Posts:
    492
    I was surprised Ooo is using Java. I don't have it as far as I can see, but in Ooo settings, I can still enable /disable Java. It's disabled of course.
     
  20. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
    My kids have thier own machines. I use pfSense and squid/squidguard to block any traffic on thier segment to only allowed sites. Doesn't affect things like games "normally" as they don't go to a url, only flash based or java based browser games. It works a treat, to the point that I don't have to be monitoring them to make sure they aren't getting into trouble. It does require that I do a bit of research when they want to go to a new site, putting in the right filters and such. But that little bit of work pays off big because it is nearly impossible for them to get into "harms way" lol. Well, unless they spoof thier MAC address, which so far they don't know about.

    Also helps with guest computers, as they are on a guest network and not on my lan. I use norton dns servers and a couple blacklists to keep the guests from getting to a known malicious site.

    If you ever want to learn more about pfSense and how to use it with your family to make YOUR life easier in that respect, let me know. Glad to share it ;)

    Sul.
     
  21. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,985
    Location:
    Canada
    Thanks Sul, I think I will try out the VMWare appliance :)
     
  22. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
  23. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Oracle has recently pledged a new focus on security - that doesn't seem like it's going to happen anytime soon. :cautious:

     
  24. Techwiz

    Techwiz Registered Member

    Joined:
    Jan 5, 2012
    Posts:
    539
    Location:
    United States
    You noticed that too :) I've have a hankering to play minecraft for the last three months, but still haven't justified it. I was going to do a coin toss, but another java exploit posted in the threads derailed that :(
     
Loading...
Thread Status:
Not open for further replies.