1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

US-CERT: Disable Java

Discussion in 'Tech Talk - Gadgets, Gizmos and Technology' started by SayWhat?, Jan 11, 2013.

  1. SayWhat?

    SayWhat? Know Nothing

    6,259
    133
    Jun 6, 2009
    I stopped using that after it turned into bloatware.

    I also used AdAware and SpyBot for a long time, but stopped when they got too big.
     
  2. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    We were considering Microsoft Corporate AV, but I didn't like some of the things said (bad reviews a conspiracy, no need for Microsoft security updates, av updates no more than 2 meg total.

    Going to look at Kaspersky.
     
  3. jimmie57

    jimmie57 Hall Of Fame

    6,629
    319
    Jun 26, 2010
    Texas City, TX
    For several years I used PC-Cillin by Trend Micro. The new software is Titanium. It is rated 6 on the protection level. The IT guy where I used to work had it installed for the company system and still does.

    The reason I left them was that I used to let the subscription run out and pick it up the next month, trying to save money. It would work but would no longer update.
    Well, when it came that time of year it stopped working without any notice whatsoever and left me totally exposed. I vowed that I would never buy it again.
    It was very good however.
     
  4. wilbur_the_goose

    wilbur_the_goose Hall Of Fame

    4,476
    49
    Aug 16, 2006
    dpeters - no signature updates? At work, mine updates every day.
     
  5. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    No, they said that there were signature updates, but that an entire set, not the average delta, was only 2 meg, even though when I looked at the manual update file, it was 60 meg.
     
  6. billsharpe

    billsharpe Hall Of Fame

    2,652
    64
    Jan 25, 2007
    Southern...
    +1

    I have MSE installed on all three of my computers.

    I gave up on Norton several years ago after I kept getting "Norton has encountered a problem. Please reinstall."

    Norton had great software when Peter Norton was still running the company.
     
  7. satcrazy

    satcrazy Icon

    1,021
    19
    Mar 15, 2011
    Great...
    What is the general idea now, install latest version ? [ had to un-install mine as it didn't have the disable feature] or, as a tech friend suggested, run without it until you find you have to have it. [ hopefully a stable patch by then?]

    He also said the same thing dpeters11 said, It's not the first or last for Java. Also, the best protection is always running your pc in user mode and password protect all accounts.

    I use Bit defender [ 2011 version] myself, and Kaspersky would be my second choice.

    I actually loaded MSE and found a bug that bit defender didn't, but it couldn't do anything with it. [ yeah, I'm second guessing BD now]

    I had Norton many years ago but it missed infections and got too big.


    I think there is no magic bullet as all the AV's are flawed, IMO.

    So, do you re-load Java or not?
     
  8. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    I don't install Java on my home systems. The only thing I used it for is the DBSTalk chatroom, and I can change my agent ID to make it use the iPad version.

    Plus, I hate the fact that you have to deselect the ask.com toolbar everytime. Worse, I didn't realize this. If you aren't thinking, and miss the checkbox during an update, it tells you that you successfully installed Java and Ask. So you think to yourself, shoot, now I need to uninstall. Guess what? It's not in add/remove programs. The Ask.com installer pauses for 10 minutes, then installs.

    http://www.zdnet.com/a-close-look-a...eptive-software-with-java-updates-7000010038/
     
  9. satcrazy

    satcrazy Icon

    1,021
    19
    Mar 15, 2011
    Great...
    jeez,
    I never noticed the ask.com checkbox during an update. Realy? Well, that's crap [you can't un-install it.] Revo works great for that [ not free, but a excellent program, I tried the trial version to eliminate a self installed program I could not get rid of, worked like a dream!

    So, besides programming a car and the dbs chat room, why do we need java again?
     
  10. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    Oh, you can uninstall it, you just have to wait 10 minutes after it says it was successfully installed.

    At work, there are several things that require it, including the Federal court system, and the USPTO. While at the same time another government agency says to get rid of it.

    Several programs run on Java outside of the browser, which isn't as big an issue. GoToMeeting, Minecraft etc. Blu-Ray players use it even. It's really mainly the use in the browser that is the big security issue.
     
  11. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
  12. satcrazy

    satcrazy Icon

    1,021
    19
    Mar 15, 2011
    Great...
    Is it more vunerable in IE than Firefox?

    It isn't looking like I'm going to re-install soon.:eek2:
     
  13. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    Java is not safe in any browser.

    I also found Oracle has a head of Java security. I hope he was recently hired.
     
  14. satcrazy

    satcrazy Icon

    1,021
    19
    Mar 15, 2011
    Great...
    O.K.

    So you can install it for use outside of your browser, just disable it in the browser then?
     
  15. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    Right, if you have apps that use it, like Minecraft, gotomeeting, etc. otherwise, don't bother with it at all.

    Ok, I guess if you had to choose, Firefox would be safer with Click to Play. However, a lot of people will just click it without considering the ramifications. Plus, is it possible that there is a security hole that bypasses that? I'm still not going to risk it.
     
  16. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    Java 7 update 13 is available, they skipped 12. Update if you have an older Java 7. Don't use Java if you don't need it :)

    Also, I'm going to give the head of Java security a pass. He was hired by Oracle in August. We'll give him a few months to correct 7+ years of issues.
     
  17. phrelin

    phrelin Hall Of Fame DBSTalk Club

    14,943
    294
    Jan 18, 2007
    Northern...
    To get the release 7-13 add-on to install correctly in Firefox it took a bit of undoing and redoing, I guess because I don't know what I'm doing. But it works. I have to use it as I have routine stuff I do using noaa.gov, bls.gov, and doleta.gov web sites. Unfortunately government web sites rely heavily on Java.

    I'm assuming that by using the 13 release, the danger level is no worse than driving a car.
     
  18. dpeters11

    dpeters11 Hall Of Fame

    16,251
    490
    May 30, 2007
    Cincinnati
    I agree, the government makes it hard. One agency tells you to get rid of it, others require it. We have the same issue at work. Federal Courts require it, Patent office requires version 6.

    In that case, Firefox's click to run might help for someone that knows when to allow it to run or not. Problem is some will just click and enable.
     

Share This Page