Disable Java In Your Browser To Avoid A Nasty New Malware

[frankxbe]

Disable Java In Your Browser To Avoid A Nasty New Malware

With a new attack that targets a security vulnerability in Oracle’s Java spreading through the hacker underground and no available fix in sight, it may be time for users to deal with the plugin’s bug themselves–by unplugging it.

read more : http://www.forbes.com/sites/andygreenberg/2012/08/27/disable-java-in-
your-browser-to-avoid-a-nasty-new-malware-spreading-attack/

UPDATE : Better article here with instructions also http://securitywatch.pcmag.com/none/302019-security-warning-disable-java-now


Remember Java and Java script are two different things entirely only disable Java not Java script , Java script is necessary to read many web pages Java is not. YMMV.

The instructions linked in the Forbes article and many others are INCORRECT these are good
link : http://www.podfeet.com/wordpress/tutorials/how-to-disable-java-in-chrome/

They are tested and correct for chrome and FF
Those who USE IE go to internet options /security /custom
Then scroll down click either the prompt or disable active scripting radio button .
or better yet don't use IE. Opera and Safari instructions can probably be Goggled.

Java test page to verify java disabled http://java.com/en/download/testjava.jsp

 

[gadget73]

One handy thing about Firefox is that it checks for stuff like that. I just went to disable java, and found that it was already shut off. That must have been whatever the update it installed earlier today was about.

 

[Ed in Tx]

Well, darn.. if I disable Java my stock chart-ticker from Scottrade won't work. Why do they use Java :dammit:

Answer to my question to tech support this morning:
"You are correct that if you disable Java on your system you will be unable to use the Scottrader Streaming Quotes program.

Scottrader Streaming Quotes is written in the Java language, as such there is no alternative or work around to use the program without Java being enabled on your system."

 

[frankxbe]

The latest Firefox is very good along with Chrome 21. I like them both chrome 21 is my daily driver nothing wrong wit F/F though good stuff.

 

[dew042]

Lock yourself in the closet, put on the tin foil hat -- its safer all the way around.

.dew.

 

[Ed in Tx]

Just got an update to Java that Oracle says addresses this problem.

http://in.reuters.com/article/2012/08/30/oracle-java-idINL2E8JUD8O20120830

 

[similost]

OH... just don't go anywhere other than AK... :thmbsp:

 

[Ed in Tx]

Yeah, but I have other bidness to tend to sometimes...

 

[similost]

Yeah, but I have other bidness to tend to sometimes...

....and that my son is how you catch cooties..

 

[rnorton]

Just got an update to Java that Oracle says addresses this problem.

http://in.reuters.com/article/2012/08/30/oracle-java-idINL2E8JUD8O20120830

I followed all of the links but only found pages of insider gibberish and no downloadable patch.

 

[Ed in Tx]

Earlier today I got the Java update icon down in the toolbar - (taskbar whatever..) but before I clicked on it searched and made damned sure it was legit. Clicked on the icon and let it do it's thing, UNchecking the Ask tool bar install during the process. Wish they wouldn't try and slip in crap while updating. You have updates turned off in Java perhaps? Probably can go to Control Panel (I assume you're using Windows) open the Java program and find update there.

 

[frankxbe]

I followed all of the links but only found pages of insider gibberish and no downloadable patch.

here is latest skinny the patch failed so be careful
http://www.pcworld.com/author/Lucian-Constantin-(Romania-Bureau)

http://www.theregister.co.uk/2012/08/31/critical_flaw_found_in_patched_java/
these two sites are usually the first to know.

if you still want enable w/ failed update patch is avail here actually it is not a patch it is a new update /install so you will want to remove older Java versions first NO need to remove Java Script it is not affected.
the latest is JRE Recommended Version 7 Update 7
http://www.java.com/en/download/index.jsp

 

[BadassBob]

OH... just don't go anywhere other than AK... :thmbsp:

Or use Linux

 

[Ed in Tx]

OH... just don't go anywhere other than AK... :thmbsp:

Oh yeah? This occurred last night.

 

[frankxbe]

Drive by probably still have my Java disabled not missing it . Similost is right tried to load scott trade ticker it want's Java .

 

[PioneerGuy75]

I have Java 6 right now, my computer is telling me to update........Update is to install 7 :scratch2:

What should I do??

 

[Ed in Tx]

I have 6 also, and it updated to 6.35 yesterday.

Haven't had any other warnings today. That one last night popped up after loading the New Posts first page.

 

[PioneerGuy75]

I have Java 6 right now, my computer is telling me to update........Update is to install 7 :scratch2:

What should I do??

 

[frankxbe]

Problem is java 6 leaves you vulnerable to other stuff I've had my Java disabled in Chrome and Firefox since Thursday haven't missed anything .
Still have it enabled in Exploder 9 but updated to 7.6 I never use Exploder but if I must visit a Java site it is avail,or down load a disposable browser
temporarily just for Java but don't use it for your daily driver .

 

[rnorton]

Actually - just make sure your Java is updated on your Windows Machines - only Java 7 is affected. MACS are out of luck on this as Apple doesn't support JAVA and Oracle has not released a patch for them yet.

The fix for Java 7 has been available since Friday. Unusually quick response for Oracle but they were catching a LOT of bad press about their slowness in patching bad leaks.