DrJBHL DrJBHL

Homeland Security Warning: Disable Java in Browsers: New Zero Day Security Flaw Found

Homeland Security Warning: Disable Java in Browsers: New Zero Day Security Flaw Found

 

It’s a pretty rare event when DHS warns to disable the Java in your browser, but they have because of a Zero Day security flaw which allows infected applets to infect your computer via your browser and allow elevation of privileges to occur.

Once this occurs, your computer will no longer keep your sensitive data private.

The apps and code to do this are out in the wild, so this is not theoretical.

So… do the recommended.

How to do it:

https://www.java.com/en/download/help/disable_browser.xml

Source:

http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-zero-day-flaw-7000009713/

172,101 views 78 replies
Reply #51 Top

Quoting DrJBHL, reply 50
Other than financial and the inconvenient truth that XP works just fine for the average user?
End of DrJBHL's quote

Thank you.

Reply #52 Top

Quoting DrJBHL, reply 50

Quoting Uvah, reply 49some insane reason

Other than financial and the inconvenient truth that XP works just fine for the average user?
End of DrJBHL's quote

I think you got the replys mixed up. lol

 

Reply #53 Top

Quoting Uvah, reply 52
I think you got the replys mixed up. lol
End of Uvah's quote

Ya it does that sometimes.  Don'tChaHateItWhenThatHappens? ;)

Reply #54 Top

No, Uvah... that's just the way the stupid quote thing works.... or doesn't. It automatically quotes the first person when it's the second that's intended.

Either way.... 

Reply #55 Top

Quoting Uvah, reply 50
 I get a popup when Java says there's an update, no email.
End of Uvah's quote

 

which is why i think that java you had was 32bit. as mentioned, there's no such thing as 64bit autoupdate (allegedly unless you fiddled around with it...)

Reply #56 Top

My daughter has Java and she also has JavaFX2.1.1 .  The second one I've never heard mentioned.  She has Windows7. 

Reply #57 Top

JavaFX is a Sun Java 'extension' that appears to be something that a developer might use and would have to be actively sought and downloaded.  It's not part of 'regular' Java.

+1 Loading…
Reply #58 Top

Thank you Daiwa.  I have no idea why it is on her pc, I don't think she does either. 

Reply #59 Top

Barb, if your daughter downloaded and installed the Java Software development kit instead of the Jave Runtime Environment than it would come with JavaFX. I would recommend that she uninstall all things Java and then download and install JRE 7.11. I know I have a couple of old games that require Java on my machine to run. It can still be disabled in the browser if you are concerned about safety.

You can get the scoop on JavaFX here: http://docs.oracle.com/javafx/2/overview/jfxpub-overview.htm

+1 Loading…
Reply #60 Top

Thank you very much Frankie!! I will tell her! 

Reply #61 Top

Thanks for the clarification, Frankie.  Makes sense, though the likelihood of needing even the JRE is low.

Reply #63 Top

That clinches it! No more cookies for Java!

Now I'm glad I got rid of Java. Maybe I'll switch to tea. lol

Reply #65 Top

I could use a good cup o' Joe about now.

Reply #66 Top

I have a Windows 8 and upon reading this thread decided it best to uninstall Java.

Now I'm getting pop-ups from Oracle asking me to let them in.

Reply #67 Top

lulapilgrim... get rid of the notification module as well.

Reply #68 Top

I have a friend who has Java on his laptop and he gets these popups telling him that Java has an update. I just told him to unistall it completely. Seems to me Oracle has their work cut out for them. OH S**T........................what about all those washing machines and dryers and radios and toasters and newfangled ovens and such. They're gonna hack your washer and steal all your duds. Don't cook your din din! Turn off the radio, leave your car home and take the shoe leather express instead and.........you can stop me at any time now. :w00t:

Reply #69 Top

Billions of devices.  Billions.

Reply #70 Top

i would worry more about those older mobile phones that use java for menus or what not XD

Reply #71 Top

Talk about topsy-turvy and then some. What if these guys hack into the wrong thing and screw their stuff up. They most likely have stuff that uses Java too. I'd love to see it come and bite them where the sun don't shine. :rofl:

Reply #72 Top

Quoting lulapilgrim, reply 66
I have a Windows 8 and upon reading this thread decided it best to uninstall Java.

Now I'm getting pop-ups from Oracle asking me to let them in.
End of lulapilgrim's quote

Got the popup again not long after turning on my computer. It asks will I allow Oracle America, Inc. to make changes to this program,  jucheck.exe ? 

A couple of questions, keeping in mind that I am a dinosaur about all these technical things.

I wonder is Oracle America, Inc someone who would benefit from having Java uninstalled?

Also I did not use the disable Java download that you offered but instead went to the uninstall program and uninstalled Java that way.

Is Java something that automatically comes with brand new computers because I certainly didn't tell the tech to install it?

Like most everything else computerwise, Java was just there and I gave it no never mind. Never had to update it or anything!

 

Reply #73 Top

I think Java is present on most machines as OEM software and it is made by Oracle America.  The fact that it popped up after uninstalling Java suggests that jucheck.exe is 1) still there, and 2) set to start on boot up.

Oracle America, Inc., is the company's name, but I've never seen them refer to themselves as anything but "Oracle" in dialogs & such (but I don't have Win8).  jucheck.exe should have been deleted when Java was uninstalled (it was here), so I'd just search for the file & manually delete it.  You might want to disable it from starting up at boot first to avoid getting a 'missing app' error message later on boot up (not sure).

Reply #74 Top

jucheck will go when Java is uninstalled. Its part of the Java package to remind you that updates are available. If one pops up just close out of it. A window will open up where the quick launch is on the right side of your taskbar asking if you want to update Java. That you can just close. Don't click on the window itself as that will give it the go-ahead to update Java.

Reply #75 Top

Thank you Daiwa and Uvah.

I've been talking now to members of my family about Java and apparently those with Norton have already been notified and the problem solved! I have AVG and no such thing at least that I'm aware of.