Linked by Hadrien Grasland on Thu 20th Jan 2011 21:16 UTC
Privacy, Security, Encryption "In 2010, exploited Java vulnerabilities outpaced the exploit of Adobe Reader and Acrobat," Landesman, senior security researcher at Cisco, said. "Java was 3.5 times more frequently exploited than were malicious PDFs. That really spells out the need for paying attention to what's making the headlines but also paying attention to the types of things that aren't making the headlines."
Thread beginning with comment 459273
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: update java
by Lennie on Fri 21st Jan 2011 00:10 UTC in reply to "RE: update java"
Lennie
Member since:
2007-09-22

Just disable the plugin in the browser, what webpage still uses Java-applets ? Really ?

Edited 2011-01-21 00:11 UTC

Reply Parent Score: 2

RE[3]: update java
by WorknMan on Fri 21st Jan 2011 01:56 in reply to "RE[2]: update java"
WorknMan Member since:
2005-11-13

Just disable the plugin in the browser, what webpage still uses Java-applets ? Really ?


Only a few that I have seen, but not enough to bother with installing it. Flash is still a necessary evil, so I run it with flashblock on. Fortunately though, I've been able to get by without Java.

Wasn't one of the whole points of Java (besides the 'run everywhere thing, that doesn't really work so much) is that it was supposed to be more secure running in a VM?

Edited 2011-01-21 01:57 UTC

Reply Parent Score: 2

RE[4]: update java
by Subcomputer on Fri 21st Jan 2011 05:31 in reply to "RE[3]: update java"
Subcomputer Member since:
2011-01-21

It is more secure in a VM, but the problem here is that the VM itself (or at least older versions) is insecure.

As far as updating, one of the reasons that there are so many old, insecure JVMs out in the wild is the pure ridiculous number of corporate apps that somehow flat out refuse to run on anything but the version they were created with, which often end up being 1.5.

Reply Parent Score: 1

RE[3]: update java
by dvhh on Fri 21st Jan 2011 09:29 in reply to "RE[2]: update java"
dvhh Member since:
2006-03-20

in the scientific/academic world it is still widely used for data display.

And I want to play minecraft too :p

Reply Parent Score: 2

RE[3]: update java
by nt_jerkface on Fri 21st Jan 2011 14:31 in reply to "RE[2]: update java"
nt_jerkface Member since:
2009-08-26

Banking websites for one. They use Java for electronic check deposits.

But anyone who doesn't have such a need should uninstall it.

Reply Parent Score: 2

RE[4]: update java
by Lennie on Sun 23rd Jan 2011 10:52 in reply to "RE[3]: update java"
Lennie Member since:
2007-09-22

This differs widely among countries. What country uses java-applets for banking ?

Reply Parent Score: 2