Why you should probably disable Java now
By Will Oremus, Slate - 9/1/201
Hackers have found a flaw in Oracle’s Java software that allows them to break into users’ computers and install nasty malware, security experts report. The attack, first spotted on Sunday by researchers at the security firm FireEye, is what security types call a "zero-day" threat, exploiting a previously unknown vulnerability for which there is currently no fix available.
The loophole appears to affect Java Version 7 (also known as 1.7) on all browsers. So far the attacks have been against PCs, but Mac users are vulnerable as well. Businesses should be especially concerned about targeted attacks, but just about anyone who uses Java on the Internet is at risk, especially since the attack has been added to the Internet’s most popular hacking kit, BlackHole.
Given the potential seriousness and pervasiveness of the attacks - and Oracle’s reputation for being slow on the draw in response to Java vulnerabilities - experts say that everyday Internet users should probably just disable Java entirely. Like, right now.
"Java has been the most exploited program for well over a year now and it simply isn’t worth the risk," Chet Wisniewski of the security firm Sophos told me in an email. "I would recommend removing Java entirely, if you can."
That’s not as problematic as it might sound. Java is not as popular on websites as it once was, and the average browser will rarely run across it, Wisniewski says.
.....
For those who can’t live without Java, Wisniewski’s blog post at Naked Security offers a few other suggestions.
One final point: This flaw does not appear to affect the previous version of Java (Version 6, aka 1.6), which is the default on most Macs. So while Mac users are theoretically as vulnerable as Windows users, only those who have specifically installed Java 1.7 should be at risk.
By Will Oremus, Slate - 9/1/201
Hackers have found a flaw in Oracle’s Java software that allows them to break into users’ computers and install nasty malware, security experts report. The attack, first spotted on Sunday by researchers at the security firm FireEye, is what security types call a "zero-day" threat, exploiting a previously unknown vulnerability for which there is currently no fix available.
The loophole appears to affect Java Version 7 (also known as 1.7) on all browsers. So far the attacks have been against PCs, but Mac users are vulnerable as well. Businesses should be especially concerned about targeted attacks, but just about anyone who uses Java on the Internet is at risk, especially since the attack has been added to the Internet’s most popular hacking kit, BlackHole.
Given the potential seriousness and pervasiveness of the attacks - and Oracle’s reputation for being slow on the draw in response to Java vulnerabilities - experts say that everyday Internet users should probably just disable Java entirely. Like, right now.
"Java has been the most exploited program for well over a year now and it simply isn’t worth the risk," Chet Wisniewski of the security firm Sophos told me in an email. "I would recommend removing Java entirely, if you can."
That’s not as problematic as it might sound. Java is not as popular on websites as it once was, and the average browser will rarely run across it, Wisniewski says.
.....
For those who can’t live without Java, Wisniewski’s blog post at Naked Security offers a few other suggestions.
One final point: This flaw does not appear to affect the previous version of Java (Version 6, aka 1.6), which is the default on most Macs. So while Mac users are theoretically as vulnerable as Windows users, only those who have specifically installed Java 1.7 should be at risk.
My Computer
- Computer type
- Laptop
- Computer Manufacturer/Model Number
- HP Pavilion dv6-6c10us
- OS
- x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
- CPU
- AMD A6-3420M APU with Radeon(tm) HD Graphics
- Motherboard
- Hewlett-Packard 1805
- Memory
- 6.00 GB
- Graphics Card(s)
- AMD Radeon(TM) HD 6520G
- Sound Card
- (1) AMD High Definition Audio Device (2) IDT High Definiti
- Monitor(s) Displays
- HP W2072a 20" LCD (1600 x 900) @ 60 Hz
- Screen Resolution
- 1366 x 768 x 32 bits (4294967296 colors) @ 60 Hz
- Hard Drives
- ST640LM0 00 HM641JI SATA Disk Device
- Keyboard
- Logitech k520 wireless KB
- Mouse
- Logitech m320 wireless mouse (bundled with KB)
- Internet Speed
- 15/5 | 54 MB Wireless 'n'
- Antivirus
- Realtime: Defender or Avast | On-demand: Malwarebytes, ESET
- Browser
- IE 11 on Win8, IE 10 on win 7
- Other Info
- Media: [Gimp, Audacity, VLC] || Comm: [WEmail 2012, Skype] || Productivity: [OpenOffice,| Textpad] || Utils: [Sysinternals, cCleaner, Speccy, Defraggler]
