Java

[Capricorn1(Tom)]

See article in http://www.Brisbanetimes.com.au in the
IT Pro Section recomends to disable Java NOW-----I have:eyepop:

Cheers

[Danack]

It's 'only' the browser plugin that needs to be disabled - not Java that's sitting on your computer and not connected to the outside world.

But yeah - the plugin must be disabled. If you're on a Mac, Apple have already disabled this plugin for you I believe.

[mithrandir]

You could always update. Java 7 U11 is the current version and Firefox does not report it as having any known issues.

If you uninstalled/disabled everything with any potential vulnerabilities you'd have a computer with all disks blank.

[Danack]

While that's true and all security is a balance between risk and being overly cautious the fact is that Sun (and now Oracle) have had a terrible record in keeping Java secure, and an even worse record in responding when security holes are found in Java.

This hole was found about 6 months ago - there was an attempted fix that almost worked, but didn't, and hackers have been able to completely compromise people's computers for months.

Unless you know you need it for a particular site (in which case you can just enable for that site) everyone else should have Java disabled in their browser.

[Danack]

The Department of Homeland Security's United States Computer Emergency Readiness Team also recommends disabling Java (http://www.us-cert.gov/current/#oracle_releases_out_of_band)

"Due to the number and severity of this and prior Java vulnerabilities, it is recommended that Java be disabled temporarily in web browsers as described in the "Solution" section of the US-CERT Alert and in the Oracle Technical Note "Setting the Security Level of the Java Client.""

[GeoffW1]

Hi,

More on this, and a few user experiences (scroll down a bit)

https://windowssecrets.com/newsletter/legitimate-app-breaks-popular-encryption-systems/

Cheers

[mithrandir]

Then there was the article in the Fairfax papers a few days back how a silent Apple update disabled OSX Java and stopped people's in-house written Java apps from running.

http://www.canberratimes.com.au/it-pro/security-it/java-block-backfires-on-apple-20130206-2dz1o.html

Not customer friendly behaviour.

[Shano592]

I need it for a custom piece of software.

I tried uninstalling it, and the software wouldn't do one (critical) step. Re-installed with the current version, and all is good in the world again.

Too many separate pieces, to make up the one puzzle. So much for keeping it simple ...

[Barrykgerdes]

I don't want reintroduce the Apple/PC debate but here is my analogy.

If you want to travel to town you have the choice of a tollway or a mainroad. The tollway should get you there the quickest at a price and the mainroad slower but free(?)

However when the tollway decides to make changes hopefully to eventually improve service we suddenly find we are paying for something that we are not getting. Then the main roads become a more useful alternative.

A further analogy is the toll operator says I will build you a tollway but you must block off the alternatives so everyone will need to use my road.

Barry