JAVA Security Warning - How Serious

[Graueradler]

We are being advised to disable JAVA until a security issue is fixed. How serious is it and Is there any substitute?

 

[Bob Noel]

bad enough that I have to turn it off completely on my work computers

 

[gprellwitz]

Java 7 Update 11 was just released this weekend. If you're running Windows, go to Control Panel, search for Java. Open that and click on the Update tab. Go ahead and update. When it asks you whether to install the "Ask" toolbar, uncheck it. That's just a marketing ploy. Accept the rest of the defaults.

 

[Graueradler]

Update completed!! Thanks

 

[Palmpilot]

The vulnerability is bad enough that even DHS was warning people about it.

http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-zero-day-flaw-7000009713/

Some security experts are saying that the new update doesn't go far enough, so I have uninstalled Java.

http://www.zdnet.com/security-exper...-day-exploit-could-take-two-years-7000009756/

 

[SCCutler]

The vulnerability is bad enough that even DHS was warning people about it.

'Cause they're, like, really good at the whole security thing.

 

[timwinters]

'Cause they're, like, really good at the whole security thing.

 

[Goofy]

'Cause they're, like, really good at the whole security thing.

 

[comanchepilot]

So has Mac been updated yet or not?

 

[Bob Noel]

So has Mac been updated yet or not?

Yes..

 

[comanchepilot]

Yes..

I have not been prompted since the beginning of the year to update my Java -

I'm running 10.6.8 - is this being supported or just 10.7 and 10.8???

 

[Bob Noel]

I have not been prompted since the beginning of the year to update my Java -

I'm running 10.6.8 - is this being supported or just 10.7 and 10.8???

I think it's just 10.7 and 10.8.

 

[Challenged]

"Less than 24 hours after Oracle patched a dangerous security hole in its Java software that was being used to seize control over Windows PCs, miscreants in the Underweb were already selling an exploit for a different and apparently still-unpatched zero-day vulnerability in Java."

http://krebsonsecurity.com/2013/01/new-java-exploit-fetches-5000-per-buyer/