Comments on: Java Patch Targets Latest Attacks http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/ In-depth security news and investigation Sat, 11 Feb 2012 19:29:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Dan http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5927 Dan Wed, 19 May 2010 13:04:41 +0000 http://krebsonsecurity.com/?p=2452#comment-5927 Looks like Apple is catching up and has released their Apple branded update for these Oracle Sun Java vulnerabilities. http://support.apple.com/kb/HT4171 . This time it didn't take 6 months. Looks like Apple is catching up and has released their Apple branded update for these Oracle Sun Java vulnerabilities. http://support.apple.com/kb/HT4171 . This time it didn’t take 6 months.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Mike http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5098 Mike Fri, 16 Apr 2010 14:45:56 +0000 http://krebsonsecurity.com/?p=2452#comment-5098 Sun had a history of abysmal documentation of its Java security updates. Oracle seems to have made things even worse. Sun had a history of abysmal documentation of its Java security updates. Oracle seems to have made things even worse.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Mark Higdon http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5085 Mark Higdon Fri, 16 Apr 2010 03:31:06 +0000 http://krebsonsecurity.com/?p=2452#comment-5085 I just ran Secunia's online software inspector (on the "detect only insecure programs" setting--for some reason it took nearly 18 minutes?!). I am running Java 6 update 19, but the scan still shows that as "secure." Secunia appears to be behind the curve at this writing. I just ran Secunia’s online software inspector (on the “detect only insecure programs” setting–for some reason it took nearly 18 minutes?!). I am running Java 6 update 19, but the scan still shows that as “secure.” Secunia appears to be behind the curve at this writing.

Like or Dislike: Thumb up 0 Thumb down 1
]]> By: emv x man http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5083 emv x man Fri, 16 Apr 2010 00:05:29 +0000 http://krebsonsecurity.com/?p=2452#comment-5083 Thanks Brian. Thanks Brian.

Like or Dislike: Thumb up 2 Thumb down 1
]]> By: Matt http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5081 Matt Thu, 15 Apr 2010 23:07:48 +0000 http://krebsonsecurity.com/?p=2452#comment-5081 Yes, they had Y! toolbar pre-checked on mine. Don't just blindly click-through the dialogs.

Yes, they had Y! toolbar pre-checked on mine.

Don’t just blindly click-through the dialogs.

Well-loved. Like or Dislike: Thumb up 8 Thumb down 0
]]> By: MowGreen http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5079 MowGreen Thu, 15 Apr 2010 22:17:39 +0000 http://krebsonsecurity.com/?p=2452#comment-5079 Does the Java autoupdater still have unwanted, unneeded fluff pre-checked when it installs the latest JRE ? In the past, java updates use to contain a 30 day trial for Carbonite, amongst other pre-checked "fluff". Since I no longer will allow JREs to be installed on my systems, I don't know if Oracle has changed Sun's past practice of opting people into unwanted, unneeded software . Does the Java autoupdater still have unwanted, unneeded fluff pre-checked when it installs the latest JRE ? In the past, java updates use to contain a 30 day trial for Carbonite, amongst other pre-checked “fluff”. Since I no longer will allow JREs to be installed on my systems, I don’t know if Oracle has changed Sun’s past practice of opting people into unwanted, unneeded software .

Like or Dislike: Thumb up 2 Thumb down 1
]]> By: joe7pak http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5078 joe7pak Thu, 15 Apr 2010 20:28:52 +0000 http://krebsonsecurity.com/?p=2452#comment-5078 Same for me - Win7 Ult x64. For some reason java is not wanting to update 64 bit windows. I hope they fix this because the harder you make it to upgrade, the less amount of people will do it. ( err, I *am* a native speaker, I think ) Bill Same for me – Win7 Ult x64. For some reason java is not wanting to update 64 bit windows.

I hope they fix this because the harder you make it to upgrade, the less amount of people will do it. ( err, I *am* a native speaker, I think )

Bill

Like or Dislike: Thumb up 1 Thumb down 1
]]> By: John http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5077 John Thu, 15 Apr 2010 20:19:00 +0000 http://krebsonsecurity.com/?p=2452#comment-5077 Just installed Java 6 update 20. Apparently Norton has lifted the hold. Just installed Java 6 update 20. Apparently Norton has lifted the hold.

Like or Dislike: Thumb up 2 Thumb down 1
]]> By: The Thinker http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5075 The Thinker Thu, 15 Apr 2010 19:57:11 +0000 http://krebsonsecurity.com/?p=2452#comment-5075 Just go to java.com and get the offline file. Here's a direct link to the windows executable: http://javadl.sun.com/webapps/download/AutoDL?BundleId=39494 The download section is located here: http://www.java.com/en/download/manual.jsp Just go to java.com and get the offline file. Here’s a direct link to the windows executable:

http://javadl.sun.com/webapps/download/AutoDL?BundleId=39494

The download section is located here:

http://www.java.com/en/download/manual.jsp

Like or Dislike: Thumb up 3 Thumb down 0
]]> By: JohnJ http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/comment-page-1/#comment-5073 JohnJ Thu, 15 Apr 2010 19:28:39 +0000 http://krebsonsecurity.com/?p=2452#comment-5073 In IE8, Security Settings - Internet Zone, should I change Scripting of Java Applets from Enable to Prompt? In IE8, Security Settings – Internet Zone, should I change Scripting of Java Applets from Enable to Prompt?

Like or Dislike: Thumb up 0 Thumb down 1
]]>