Homeland Security Warning: Disable Java in Browsers: New Zero Day Security Flaw Found

By on January 11, 2013 3:40:17 PM from JoeUser Forums JoeUser Forums

DrJBHL

Join Date 04/2002
+2150

 

It’s a pretty rare event when DHS warns to disable the Java in your browser, but they have because of a Zero Day security flaw which allows infected applets to infect your computer via your browser and allow elevation of privileges to occur.

Once this occurs, your computer will no longer keep your sensitive data private.

The apps and code to do this are out in the wild, so this is not theoretical.

So… do the recommended.

How to do it:

https://www.java.com/en/download/help/disable_browser.xml

Source:

http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-zero-day-flaw-7000009713/

78 Replies
Search this post
Subscription Options


Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 3:45:25 PM from Stardock Forums Stardock Forums

I opted long ago to simply to remove Java totally as these exploits are too common.

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 3:51:12 PM from WinCustomize Forums WinCustomize Forums

Quoting Neil Banfield,
I opted long ago to simply to remove Java totally as these exploits are too common.

I removed anything Java on my S box since September. Haven't had the need for it since...I think there is a thread dedicated to this roaming around???

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 4:02:09 PM from WinCustomize Forums WinCustomize Forums

Disabled in Firefox. Hopefully a fix is in the offing real soon.

Reason for Karma (Optional)
Successfully updated karma reason!
Sign Up or Login and this ad disappears!
There are many great features available to you once you register. Sign Up for a free account and browse the forums without ads.
January 11, 2013 5:20:23 PM from Sins of a Solar Empire Forums Sins of a Solar Empire Forums

First of all thanks for the heads up. Second,  I got 2 questions:

1. Is this US only or worldwide?

2. If I delete java, what is an alternative software I should use, Im not really smart around computers, especially software stuff.

 

 

 

 

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 5:54:54 PM from WinCustomize Forums WinCustomize Forums

thanks for the heads up.

edit** me either. no java control panel

Windows 7, Vista

  • Click on the Start button and then click on the Control Panel option.
  • In the Control Panel Search enter Java Control Panel.
  • Click on the Java icon to open the Java Control Panel.
Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 6:00:55 PM from WinCustomize Forums WinCustomize Forums

I just learned that I don't even have Java installed. Interesting.

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 6:25:36 PM from WinCustomize Forums WinCustomize Forums

Quoting tito_defekt,
1. Is this US only or worldwide?

2. If I delete java, what is an alternative software I should use, Im not really smart around computers, especially software stuff.

1. The net is world wide... so...

2. You don't need Java.. except in some programs/applications. You know what programs you have, so check 'em out... if you have questions about them you can ask here or on the Forums where the software was obtained...

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 6:26:29 PM from WinCustomize Forums WinCustomize Forums

Quoting kona0197,
I just learned that I don't even have Java installed. Interesting.

That's fine, kona... just make sure to disable Javascript in your browser.

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 6:27:13 PM from WinCustomize Forums WinCustomize Forums

Quoting gmc2,
thanks for the heads up.

edit** me either. no java control panel

Windows 7, Vista


Click on the Start button and then click on the Control Panel option.
In the Control Panel Search enter Java Control Panel.
Click on the Java icon to open the Java Control Panel.

You're welcome...I don't either... just disable the sucker in your browser/s.

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 6:39:01 PM from Sins of a Solar Empire Forums Sins of a Solar Empire Forums

For Firefox I an highly recommend the addon

 

NoScript

 

It allows you to state exactly what pages may use java, flash or scripts.

 

For example if you visit this the current page you are looking at.

 

Data is loaded from:

 

sinsofasolarempire.com

google.com

stardock.net

stardock.com

googleanalytics.com

twitter.com

facebook.net

 

Now, with no Script you can allow only the Java, Flash and scripts your really want to execute.

 

For me that means I tell NoScript to

 

Allow

sinsofasolarempire.com

google.com

stardock.net

stardock.com

 

 

Allow on this page only - normaly it is blocked but on this site it is not.

googleanalytics.com

 

Not trustworthy - those sites are always blocked wherever you surf.

twitter.com

facebook.net

 

 

Of course the decision what sites are allowed to do what is entirely yours.

 

I use it for several years now and never again had any browser hijacked.

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 7:34:41 PM from WinCustomize Forums WinCustomize Forums

Quoting DrJBHL,

Quoting kona0197, reply 6I just learned that I don't even have Java installed. Interesting.

That's fine, kona... just make sure to disable Javascript in your browser.

 

Javascript ≠ Java

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 7:50:06 PM from WinCustomize Forums WinCustomize Forums

Quoting gmc2,
Windows 7, Vista

Click on the Start button and then click on the Control Panel option.

In the Control Panel Search enter Java Control Panel.

Click on the Java icon to open the Java Control Panel.

No Java Control Panel,,,what now?

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 7:59:01 PM from WinCustomize Forums WinCustomize Forums

Quoting S J N,
No Java Control Panel,,,what now?
If on Win7 look in Control Panel\Programs\Programs and Features and see if Java is installed. If it is, take whatever action you deem appropriate. If it isn't....carry on.

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 8:17:42 PM from WinCustomize Forums WinCustomize Forums

Can it be uninstalled from the pc?

 

 

Opening the java control panel...I disabled java in the browser...but looking at that control panel, clicking on *Java* it says..."View and manage Java Runtime Versions and settings for Java applications and applets".    Then clicking on "View"... I see that  there is a *path* from the platform..etc. and it is "ENABLED" .  Should that also be disabled?

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 8:18:45 PM from WinCustomize Forums WinCustomize Forums

Quoting teddybearcholla,
Can it be uninstalled from the pc?
yes

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 8:27:17 PM from WinCustomize Forums WinCustomize Forums

In add remove programs or I have Revo uninstaller....?  Thank you Xiandi!

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 9:16:18 PM from WinCustomize Forums WinCustomize Forums

I left Javascript enabled. Facebook needs it. Besides I rarely visit sites outside of the 7 or 8 I visit everyday, all of witch are trusted sites.

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 9:22:27 PM from WinCustomize Forums WinCustomize Forums

Quoting kona0197,
I left Javascript enabled. Facebook needs it.

Yes, but does anyone NEED Facebook?....

Reason for Karma (Optional)
Successfully updated karma reason!
January 11, 2013 11:51:23 PM from JoeUser Forums JoeUser Forums

I think you can leave JavaScript enabled, but I'd also use NoScript for further safety.  NoScript is only a problem if more than one person uses the computer and one or more don't understand how NoScript works - it can be very annoying and a source of friction.  In some cases that might be a feature rather than a bug, I'll admit.

I've found many of the sites I routinely use, particularly financial institution sites, require JavaScript be enabled.

Reason for Karma (Optional)
Successfully updated karma reason!
January 12, 2013 12:07:16 AM from WinCustomize Forums WinCustomize Forums

Quoting kona0197,
I left Javascript enabled. Facebook needs it.

Dunno about that one. I have zero [0] Java on my box and I'm able to view/see anything/all Facebook. I feel comfortable with my settings [Win 7 Pro]...

Reason for Karma (Optional)
Successfully updated karma reason!
January 12, 2013 1:16:15 AM from WinCustomize Forums WinCustomize Forums

Go into the options for Firefox and disable JavaScript. Facebook will have fits when you load it.

Reason for Karma (Optional)
Successfully updated karma reason!
January 12, 2013 1:50:34 AM from GalCiv II Forums GalCiv II Forums

Oh no how will I ever dial a nine-chevron address without Java?  

Reason for Karma (Optional)
Successfully updated karma reason!
January 12, 2013 3:54:02 AM from WinCustomize Forums WinCustomize Forums

I did it few days ago.. No problems with any website including Facebook.. Thank you very much for this hint!

Reason for Karma (Optional)
Successfully updated karma reason!
January 12, 2013 4:08:51 AM from WinCustomize Forums WinCustomize Forums

Oh no how will I ever dial a nine-chevron address without Java?

Get Rodney to write a script...

Reason for Karma (Optional)
Successfully updated karma reason!
January 12, 2013 5:09:14 AM from Elemental Forums Elemental Forums

Quoting DrJBHL,

Quoting kona0197, reply 6I just learned that I don't even have Java installed. Interesting.

That's fine, kona... just make sure to disable Javascript in your browser.

 

... that's a joke, right? java and javascript have nothing to do with each other

Reason for Karma (Optional)
Successfully updated karma reason!
Stardock Forums v1.0.0.0    #108431  walnut1   Server Load Time: 00:00:00.0000484   Page Render Time:

Home | About | Privacy | Upload Guidelines | Terms of Service | Help
WinCustomize © 2014 Stardock Corporation. All Rights Reserved.