Results 1 to 12 of 12
  1. #1
    New Lounger
    Join Date
    May 2012
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re:Window Secrets 1/24/16 Java

    Hi all, long time reader, first time poster.

    So I read the stories by Woody and Susan in the latest newsletter regarding Java. What I'm still unclear about is, is it ok to allow pages to run JavaScipt?

    They say how deadly Java is. And they talk about the difference between Java and JavaScript. They don't say if JavaScript is safe. Seems like most web pages (especially with imbedded video) require that JavaScript be enabled in the browser.

    If I disable Java in the Java Console, as described in the WS letter, (which I have done) and allow JavaScript in my browsers, is all good? If I disable JavaScript in my browser settings, which they make no mention of doing, almost no web pages work. So am I inferring correctly that by them stating that Java is death, and JavaScript is nothing like Java, then JavaScript is perfectly safe to allow?

    Thanks,
    Don
    Last edited by Kalkan; 2013-01-26 at 04:59.

  2. #2
    Bronze Lounger DrWho's Avatar
    Join Date
    Dec 2009
    Location
    Central Florida
    Posts
    1,501
    Thanks
    30
    Thanked 205 Times in 163 Posts
    Two things.....

    1. Download and install the very latest version of Java. It's been fixed.

    2. Use a high quality Anti-Virus program and keep it up to date, DAILY!
    I use AVG 2013 and have it set to update and scan every day.

    I have not disabled Java on my own PC's and have no intention of doing so.

    Cheers Mates!
    The Doctor
    Experience is truly the best teacher.

    Backup! Backup! Backup! GHOST Rocks!

  3. #3
    Silver Lounger
    Join Date
    Oct 2012
    Posts
    2,335
    Thanks
    13
    Thanked 267 Times in 260 Posts
    An unfortunate coincidence of nomenclature, indeed JavaScript is completely different from Java.

  4. #4
    Super Moderator jwitalka's Avatar
    Join Date
    Dec 2009
    Location
    Minnesota
    Posts
    6,794
    Thanks
    117
    Thanked 799 Times in 720 Posts
    If it was me, I would uninstall all java versions via Add/remove programs. Then go to Java.com and download the latest version. Be careful to look for added junkware enabled by default as part of the install.

    After the latest version is installed, go to Control Panel > Java
    Click on the security tab
    Uncheck "Enable Java in the browser and click OK.

    Run for a couple of weeks and if you don't find a website you use that needs Java, uninstall Java and you won't have to worry about another vulnerability from it.

    If you do find you need Java, go back into the Control Panel Java applet and recheck Enable Java....
    Keep your Java and your AV updated as Dr Who suggested and you should be fine. There are no guarantees but that's true of all malware, not just Java.

    Jerry

  5. #5
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,748
    Thanks
    171
    Thanked 649 Times in 572 Posts
    Quote Originally Posted by DrWho View Post
    Download and install the very latest version of Java.
    Quote Originally Posted by jwitalka View Post
    Then go to Java.com and download the latest version.
    The question was about JavaScript.

    Bruce

  6. #6
    New Lounger
    Join Date
    May 2012
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Thanks, Bruce. I appreciate everyone's comments, but apparently my question wasn't as clear as I thought I'd made it.

    I have always kept Java up to date with only the current version installed. That's not where my question lies.

    I'll re-ask more succinctly:

    Is JavaScript safe from attack?

    Thanks,
    Don

  7. #7
    Plutonium Lounger Medico's Avatar
    Join Date
    Dec 2009
    Location
    USA
    Posts
    12,631
    Thanks
    161
    Thanked 936 Times in 856 Posts
    Yes it is! Java is NOT JavaScript.
    BACKUP...BACKUP...BACKUP
    Have a Great Day! Ted


    Sony Vaio Laptop, 2.53 GHz Duo Core Intel CPU, 8 GB RAM, 320 GB HD
    Win 8 Pro (64 Bit), IE 10 (64 Bit)


    Complete PC Specs: By Speccy

  8. #8
    Silver Lounger
    Join Date
    Oct 2012
    Posts
    2,335
    Thanks
    13
    Thanked 267 Times in 260 Posts
    Also, see post #3.

  9. #9
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,585
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Quote Originally Posted by Kalkan View Post
    Thanks, Bruce. I appreciate everyone's comments, but apparently my question wasn't as clear as I thought I'd made it.

    I have always kept Java up to date with only the current version installed. That's not where my question lies.

    I'll re-ask more succinctly:

    Is JavaScript safe from attack?

    Thanks,
    Don
    Javascript is safe from the attack as described in the article. In general, Javascript is subject to bugs the same as any other programming effort. The only question is whether any one issue will expose a user to some security exploit.

    Joe

  10. #10
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,748
    Thanks
    171
    Thanked 649 Times in 572 Posts
    Quote Originally Posted by JoeP517 View Post
    Javascript is safe from the attack as described in the article.
    The articles referenced (by Susan and Woody on 1/24) did not describe JavaScript as safe from attack, and didn't focus on any particular Java attack:

    Woody said, "I’m not going to review the most recent round of Java exploits, their patches, or new exploits built onto the backs of Java fixes."

    Susan included a link to a very recent "JavaScript threat in IE" [6, 7 and 8].

    As highlighted in post #1 of this thread:

    "They say how deadly Java is. And they talk about the difference between Java and JavaScript. They don't say if JavaScript is safe."

    Bruce

    P.S. I'm only questioning your "as described in the article".
    Last edited by BruceR; 2013-01-30 at 12:48.

  11. #11
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,748
    Thanks
    171
    Thanked 649 Times in 572 Posts
    P.P.S. Perhaps the answer should be "It's safer" rather than safe?

    Bruce

  12. #12
    Super Moderator CLiNT's Avatar
    Join Date
    Dec 2009
    Location
    California & Arizona
    Posts
    6,121
    Thanks
    160
    Thanked 609 Times in 557 Posts
    Quote Originally Posted by Kalkan View Post
    Hi all, long time reader, first time poster.

    So I read the stories by Woody and Susan in the latest newsletter regarding Java. What I'm still unclear about is, is it ok to allow pages to run JavaScipt?

    They say how deadly Java is. And they talk about the difference between Java and JavaScript. They don't say if JavaScript is safe. Seems like most web pages (especially with imbedded video) require that JavaScript be enabled in the browser.

    If I disable Java in the Java Console, as described in the WS letter, (which I have done) and allow JavaScript in my browsers, is all good? If I disable JavaScript in my browser settings, which they make no mention of doing, almost no web pages work. So am I inferring correctly that by them stating that Java is death, and JavaScript is nothing like Java, then JavaScript is perfectly safe to allow?

    Thanks,
    Don
    Java Script (Client side)?
    It's approximately about as safe as the next potential browser vulnerability waiting to be discovered. (that could be tomorrow, or next Tuesday)
    Make sure the browser version you are using is the most up to date for the OS you are using. (probably the best you can hope for)
    Disabling java script in your browser, in most instances, is not recommended, but it is configurable based around your choice of security zones.
    Sun/Oracle Java
    I dumped it long ago. But if you do have software that has a need for it;
    1 Make certain it's the most up to date version.
    2 Uninstall the previous version prior to installing the newer version.
    3 Be cognizant that java is vulnerable and flawed, and adjust your computer habits accordingly.


    How to enable JavaScript in your browser
    DRIVE IMAGING
    Invest a little time and energy in a well thought out BACKUP regimen and you will have minimal down time, and headache.

    Build your own system; get everything you want and nothing you don't.
    Latest Build:
    ASUS X99 Deluxe, Core i7-5960X, Corsair Hydro H100i, Plextor M6e 256GB M.2 SSD, Corsair DOMINATOR Platinum 32GB DDR4@2666, W8.1 64 bit,
    EVGA GTX980, Seasonic PLATINUM-1000W PSU, MountainMods U2-UFO Case, and 7 other internal drives.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •