This notice is not related to diabetes or TuDiabetes, specifically, but is an important security warning for any of our members and visitors who use PCs. Please continue reading.
Hackers could install malicious software, increasing vulnerability ...
The Department of Homeland Security is urging computer users to disable or uninstall the Java programming language because of a serious security vulnerability.
The flaw in Java 7 "can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system," according to a warning posted Thursday by the U.S. Computer Emergency Response Team (CERT).
Hundreds of millions of consumers and businesses may be affected.
Hackers could exploit the flaw to install malicious software or malware that could make users vulnerable to identity theft or allow their computers to be exploited by "botnets" that could crash networks or be used to attack web sites.
"Note that applications that use the Internet Explorer web content rendering components, such as Microsoft Office or Windows Desktop Search, may also be used as an attack vector for this vulnerability," the warning adds.
DHS said it is "currently unaware of a practical solution to this problem."
Java was developed by Sun Microsystems, which Oracle bought in 2010. There's no indication when a security patch might be available, and Oracle had no comment Friday night, Reuters said.
Java allows programmers to write software using a single set of code that will run on almost any computer.
MacRumors reports that Apple has already disabled the Java 7 plug-in installed on Macs.
ZD Net first reported the so-called zero-day vulnerability. In a follow up, it showed how the flaw could be exploited.
Hi Holger, I found my Java control panel but didn't see where to disable it. I also went to add ons but it doesn't appear in that feature. I know I have Java 7 but don't know where to disable it, is there some where else that I can disable. Also does any know what we would use to upload our carelink as Nel touched on before and also other apps that need Java?
Permalink Reply by Holger Schmeken on January 13, 2013 at 2:28pm If you are not sure and the link I have mentioned does not help then deinstall Java. Until a fix is available all the Apps needing Java can not be used. But I am sure a fix will be available soon - just a matter of days in my opinion.
Permalink Reply by Shawnmarie on January 12, 2013 at 8:29am Here's a link to the actusl warning on Homeland Security's page. I leave it to the techies to decipher.
http://www.us-cert.gov/cas/techalerts/TA13-010A.html
I post this mainly because I was skeptical at first as well, but it is apparently not a hoax.
Permalink Reply by Trudy on January 12, 2013 at 9:18am
Permalink Reply by Trudy on January 12, 2013 at 9:25am
Permalink Reply by Holger Schmeken on January 13, 2013 at 9:23am Is it possible that you have confused Java with JavaScript? JavaScript is not affected by the Java problem. It is just the Java Add-on that should be disabled not JavaScript.
Permalink Reply by Trudy on January 13, 2013 at 11:57am Well, I honestly am at a loss here. It is JavaScript that I disabled temporarily, which caused the problems that I listed.
My husband replaced our Java 7 with Java 6 an hour ago, hoping that would help. Java 6 seems to be working fine except for some reason, the photos on My Page are now not scrolling, even though they are scrolling on the TuD homepage. Problems, problems, problems!
Permalink Reply by Howie767 on January 13, 2013 at 12:24pm It's the plug-in not the Java Virtual Machine which is what your husband replaced. Only enable the Java plug-in when doing critical stuff. Disable it when just surfing the Internet. Especially if you frequent Adult Sites! Joking of course.
As Holger said, Javascript has absolutely nothing in common with Java. They just stole the name as a marketing trick. It's a completely different programming language.
Permalink Reply by Holger Schmeken on January 13, 2013 at 2:24pm I would recommend to deinstall Java under Control Panel > Add/Remove Programs. Java Version 6 has security issues too. You do not need Java to use TuDiabetes. But you need JavaScript and it is safe to enable JavaScript. I would wait for the next update of the Java Engine. I am sure some people at Oracle work day and night to fix the problem.
JavaScripts are small program that can run safely in your browser. They often do useful things to make the use of the page more convenient. As you have experienced many things will not work if JavaScript is disabled. Java and JavaScript have only in common that they use the same language to write the program code.
Permalink Reply by Howie767 on January 13, 2013 at 2:33pm This rivals the debacle with Internet Explorer 4.
Howie from the Island ...you are welcome for a visit , ha, ha ...but maybe not ..it is snowing again and you may get stuck .
Permalink Reply by Holger Schmeken on January 14, 2013 at 2:09am Java Version 7 Update 11 is now available. If you really need Java you should only run this updated version. In general Java is not necessary to use TuDiabetes.
Manny Hernandez(Co-Founder, Editor, has LADA)
|
Bradford (has type 1) |
Lorraine (mother of type 1) |
Marie B (has type 1) |
|
|
|
|
|
|
This site complies with the HONcode standard for trustworthy health information: verify here.
© 2013 A community of people touched by diabetes, run by the Diabetes Hands Foundation.
