This notice is not related to diabetes or TuDiabetes, specifically, but is an important security warning for any of our members and visitors who use PCs. Please continue reading.
Hackers could install malicious software, increasing vulnerability ...
The Department of Homeland Security is urging computer users to disable or uninstall the Java programming language because of a serious security vulnerability.
The flaw in Java 7 "can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system," according to a warning posted Thursday by the U.S. Computer Emergency Response Team (CERT).
Hundreds of millions of consumers and businesses may be affected.
Hackers could exploit the flaw to install malicious software or malware that could make users vulnerable to identity theft or allow their computers to be exploited by "botnets" that could crash networks or be used to attack web sites.
"Note that applications that use the Internet Explorer web content rendering components, such as Microsoft Office or Windows Desktop Search, may also be used as an attack vector for this vulnerability," the warning adds.
DHS said it is "currently unaware of a practical solution to this problem."
Java was developed by Sun Microsystems, which Oracle bought in 2010. There's no indication when a security patch might be available, and Oracle had no comment Friday night, Reuters said.
Java allows programmers to write software using a single set of code that will run on almost any computer.
MacRumors reports that Apple has already disabled the Java 7 plug-in installed on Macs.
ZD Net first reported the so-called zero-day vulnerability. In a follow up, it showed how the flaw could be exploited.
Permalink Reply by Howie767 on January 14, 2013 at 7:28am Thanks. Somebody at Oracle just made a bundle in overtime. Probably the same people that created the bug in the first place!
Thank you Holger ...I won't need to call MM Canada ...but what happened to my earlier response " Emily , question : with Holgers good news message of almost one day ago , that Java Version 7 Update 11 is now available is it still necessary to keep the warning on the main page ?? ...maybe best if I sent Admin the question :) ...I posted in your discussion as well...maybe " old brains and forgetting to click on " add reply " ??? . Another try !
Permalink Reply by Holger Schmeken on January 15, 2013 at 3:13am Yes, the update is available. Still millions of people are online with the old version. On some computers the automated update process will fail or stay silent. So the problem will persist. It will take months perhaps years to replace all installations worldwide.

Permalink Reply by Emily Coles on January 29, 2013 at 12:12pm Holger, thank you SO MUCH for helping us all understand this thing! I confess that the technical aspects of this were beyond me, as well. Manny asked me to post it so folks would know... And thanks to your help, now we know!
Permalink Reply by Holger Schmeken on February 4, 2013 at 12:50am One follow up: Oracle has released the next important update for Java. Check carefully if you really need Java. Most websites do not need Java to work properly. If not I would recommend to deinstall Java in Control panel > Programs. If you are unsure or in need for Java then follow this link and install the update. This update is rather urgent and recommended for all Java users.
Permalink Reply by Trudy on February 4, 2013 at 5:44am Thanks, Holger, we've now downloaded this update.
Permalink Reply by Holger Schmeken on February 20, 2013 at 4:15am Oracle released Java Version 15 today!
I would also recommend to check the version of Adobe flash. If your version is older you should download and install the newest flash player.
Manny Hernandez(Co-Founder, Editor, has LADA)
|
Bradford (has type 1) |
Lorraine (mother of type 1) |
Marie B (has type 1) |
|
|
|
|
|
|
This site complies with the HONcode standard for trustworthy health information: verify here.
© 2013 A community of people touched by diabetes, run by the Diabetes Hands Foundation.
