Feds warn PC users to disable Java due to security flaw

This notice is not related to diabetes or TuDiabetes, specifically, but is an important security warning for any of our members and visitors who use PCs. Please continue reading.

Hackers could install malicious software, increasing vulnerability ...

The Department of Homeland Security is urging computer users to disable or uninstall the Java programming language because of a serious security vulnerability.

The flaw in Java 7 "can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system," according to a warning posted Thursday by the U.S. Computer Emergency Response Team (CERT).

Hundreds of millions of consumers and businesses may be affected.

Hackers could exploit the flaw to install malicious software or malware that could make users vulnerable to identity theft or allow their computers to be exploited by "botnets" that could crash networks or be used to attack web sites.

"Note that applications that use the Internet Explorer web content rendering components, such as Microsoft Office or Windows Desktop Search, may also be used as an attack vector for this vulnerability," the warning adds.

DHS said it is "currently unaware of a practical solution to this problem."

Java was developed by Sun Microsystems, which Oracle bought in 2010. There's no indication when a security patch might be available, and Oracle had no comment Friday night, Reuters said.

Java allows programmers to write software using a single set of code that will run on almost any computer.

MacRumors reports that Apple has already disabled the Java 7 plug-in installed on Macs.

ZD Net first reported the so-called zero-day vulnerability. In a follow up, it showed how the flaw could be exploited.

See the original article.

Tags: JAVA, PC, hackers, security

Views: 747

▶ Reply to This

Replies to This Discussion

Permalink Reply by Betty J on January 13, 2013 at 10:21am

Hi Holger, I found my Java control panel but didn't see where to disable it. I also went to add ons but it doesn't appear in that feature. I know I have Java 7 but don't know where to disable it, is there some where else that I can disable. Also does any know what we would use to upload our carelink as Nel touched on before and also other apps that need Java?

Permalink Reply by Holger Schmeken on January 13, 2013 at 2:28pm

If you are not sure and the link I have mentioned does not help then deinstall Java. Until a fix is available all the Apps needing Java can not be used. But I am sure a fix will be available soon - just a matter of days in my opinion.

Permalink Reply by Shawnmarie on January 12, 2013 at 8:29am

Here's a link to the actusl warning on Homeland Security's page. I leave it to the techies to decipher.

http://www.us-cert.gov/cas/techalerts/TA13-010A.html

I post this mainly because I was skeptical at first as well, but it is apparently not a hoax.

Permalink Reply by Trudy on January 12, 2013 at 9:18am
Hi Emily. When my Java is disabled, I get a message on the top of the TuD homepage saying that I need Java in order to use TuDiabetes! It turns out that I can comment (as I am now doing with Java disabled), but I can's sign out. Is there any way to change TuD so that Java is not necessary for the complete use of TuD?

Disabling Java is a big problem for me actually -- now I can't get to my email!
Permalink Reply by Trudy on January 12, 2013 at 9:25am
P.S. I'm finding other problems after disabling Java, such as an inability to edit my comment or to see the Chat.
Permalink Reply by Holger Schmeken on January 13, 2013 at 9:23am

Is it possible that you have confused Java with JavaScript? JavaScript is not affected by the Java problem. It is just the Java Add-on that should be disabled not JavaScript.

Permalink Reply by Trudy on January 13, 2013 at 11:57am

Well, I honestly am at a loss here. It is JavaScript that I disabled temporarily, which caused the problems that I listed.

My husband replaced our Java 7 with Java 6 an hour ago, hoping that would help. Java 6 seems to be working fine except for some reason, the photos on My Page are now not scrolling, even though they are scrolling on the TuD homepage. Problems, problems, problems!

Permalink Reply by Howie767 on January 13, 2013 at 12:24pm

It's the plug-in not the Java Virtual Machine which is what your husband replaced. Only enable the Java plug-in when doing critical stuff. Disable it when just surfing the Internet. Especially if you frequent Adult Sites! Joking of course.

As Holger said, Javascript has absolutely nothing in common with Java. They just stole the name as a marketing trick. It's a completely different programming language.

Permalink Reply by Holger Schmeken on January 13, 2013 at 2:24pm

I would recommend to deinstall Java under Control Panel > Add/Remove Programs. Java Version 6 has security issues too. You do not need Java to use TuDiabetes. But you need JavaScript and it is safe to enable JavaScript. I would wait for the next update of the Java Engine. I am sure some people at Oracle work day and night to fix the problem.

JavaScripts are small program that can run safely in your browser. They often do useful things to make the use of the page more convenient. As you have experienced many things will not work if JavaScript is disabled. Java and JavaScript have only in common that they use the same language to write the program code.

Permalink Reply by Howie767 on January 13, 2013 at 2:33pm

This rivals the debacle with Internet Explorer 4.

Permalink Reply by nel on January 13, 2013 at 3:03pm

Howie from the Island ...you are welcome for a visit , ha, ha ...but maybe not ..it is snowing again and you may get stuck .

Permalink Reply by Holger Schmeken on January 14, 2013 at 2:09am

Java Version 7 Update 11 is now available. If you really need Java you should only run this updated version. In general Java is not necessary to use TuDiabetes.

RSS

Advertisement



REsources

Groups

From the Diabetes Hands Foundation blog...

Congratulations Diabetes Advocates Scholarship Recipients!

The Diabetes Hands Foundation and Diabetes Advocates Program is proud to announce and congratulate the members of DA who were granted scholarships to attend diabetes conferences in 2013! Thanks to a generous grant from Novo Nordisk, in 2013 we were …
Continue Reading

La Familia de EsTuDiabetes Sigue Creciendo

El Centro Nacional de Prevención de Enfermedades Crónicas y Promoción de la Salud en el Estados Unidos encontró que a partir de 2002-2009, el 11,8% de los hispanos mayores de 20 años, que viven en los EU, viven con diabetes …
Continue Reading

TuDiabetes Team

DHF STAFF

Manny Hernandez
(Co-Founder, Editor, has LADA)

Emily Coles
(Head of Communities, has type 1)

Emily Walton
(Business Manager)

Mike Lawson
(Head of Experience, has type 1)

Corinna Cornejo
(Development Manager, has type 2)

Heather Gabel
(Administrative and Programs Assistant, has type 1)

DHF VOLUNTEERS


Lead Administrator
Bradford (has type 1)

Administrators
Lorraine (mother of type 1)
Marie B (has type 1)

Teena (has type 2)

Brian (bsc) (has type 2)

jrtpup (has type 1)

 

LIKE us on Facebook

Spread the word

Loading…

Get Badge

This website is certified by Health On the Net Foundation. Click to verify. This site complies with the HONcode standard for trustworthy health information: verify here.

© 2013   A community of people touched by diabetes, run by the Diabetes Hands Foundation.

Badges  |  Contact Us  |  Terms of Service