This notice is not related to diabetes or TuDiabetes, specifically, but is an important security warning for any of our members and visitors who use PCs. Please continue reading.
The Department of Homeland Security is urging computer users to disable or uninstall the Java programming language because of a serious security vulnerability.
The flaw in Java 7 "can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system," according to a warning posted Thursday by the U.S. Computer Emergency Response Team (CERT).
Hundreds of millions of consumers and businesses may be affected.
Hackers could exploit the flaw to install malicious software or malware that could make users vulnerable to identity theft or allow their computers to be exploited by "botnets" that could crash networks or be used to attack web sites.
"Note that applications that use the Internet Explorer web content rendering components, such as Microsoft Office or Windows Desktop Search, may also be used as an attack vector for this vulnerability," the warning adds.
DHS said it is "currently unaware of a practical solution to this problem."
Java was developed by Sun Microsystems, which Oracle bought in 2010. There's no indication when a security patch might be available, and Oracle had no comment Friday night, Reuters said.
Java allows programmers to write software using a single set of code that will run on almost any computer.
MacRumors reports that Apple has already disabled the Java 7 plug-in installed on Macs.
Thanks. Somebody at Oracle just made a bundle in overtime. Probably the same people that created the bug in the first place!
Thank you Holger ...I won't need to call MM Canada ...but what happened to my earlier response " Emily , question : with Holgers good news message of almost one day ago , that Java Version 7 Update 11 is now available is it still necessary to keep the warning on the main page ?? ...maybe best if I sent Admin the question :) ...I posted in your discussion as well...maybe " old brains and forgetting to click on " add reply " ??? . Another try !
Yes, the update is available. Still millions of people are online with the old version. On some computers the automated update process will fail or stay silent. So the problem will persist. It will take months perhaps years to replace all installations worldwide.
Holger, thank you SO MUCH for helping us all understand this thing! I confess that the technical aspects of this were beyond me, as well. Manny asked me to post it so folks would know... And thanks to your help, now we know!
One follow up: Oracle has released the next important update for Java. Check carefully if you really need Java. Most websites do not need Java to work properly. If not I would recommend to deinstall Java in Control panel > Programs. If you are unsure or in need for Java then follow this link and install the update. This update is rather urgent and recommended for all Java users.
Thanks, Holger, we've now downloaded this update.
Thank you Holger. :) I do use it.