Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[pilgrimboy]

I was hoping that some of you smarter in the ways of Java could give me some insight. This whole Java uproar is about the vulnerability that has been known since August. Should I really uninstall Java? Does this pose any problems for the long-term development of Minecraft?

US warns on Java software as security concerns escalate

[FritzPL]

I'm no American, nor do I care about or watch politics, but US Goverment has done a plenty of ugly shits lately in terms of computer software.
You can uninstall Java if you want, I'm personally not going to do it - I'm impressed, in fact. I wonder where are the hackers going to install viruses next.

[Urist McScoopbeard]

Well, this seems like it may be better off in the general discussion sub-forum or life advice, I would not unistall java as of yet, there are a lot of security scares and it doesnt necessarily mean your gonna get hacked, it just says most attacks hit java based software. You can disable java and all that jazz, but I wouldn't take the threat as inevitable.

[pilgrimboy]

If someone has the power to move it, feel free. I only ever use this subsection of the forums. Thought since it dealt with Minecraft, it fit. But by no means would I be offended for it to be moved.

[Rose]

You can move it yourself, actually.

[amjh]

The vulnerabilities only apply when running untrusted code, so it's enough to disable browser plugins and not run stuff from untrusted sources. No need to uninstall because of this.

[Viken]

There are always security concerns, regardless of what you're using. So long as a program connects to other computer systems outside of your local machine, there are always weaknesses, loopholes, and coding faults that allow anyone skilled or clever enough to work their way through them.  It doesn't mean its going to happen to you, or that its overly common on a large scale.

My personal experience is that if you're careful not to do something stupid, you should be just fine.

[pilgrimboy]

How do I move it?

[JWNoctis]

How do I move it?

Check bottom of page.

[Darvi]

Doesn't matter anyway since there already is a thread on the subject.

[Shadowlord]

You can disable Java in the browser (java is in your windows control panel if you're on windows, and has an option to do just that with the latest version of java), which should protect you from applets in your browsers (but obviously anything you download will by default have full permissions still and will run fine as long as you don't try to run it in a web browser, e.g. minecraft and mods for it).

The normal behavior for a web browser is to always run any java applet that doesn't ask for any security permissions, but ask permission from you to run anything that is signed or wants permissions. (Unless it is asking permission for all java applets - if you can find a setting to make it do that)

The easiest and safest solution really is to just disable java in the browser. The exploit allows an applet with no permissions to escalate its permissions without having to ask you, meaning that if it runs at all, it will get the permissions it needs. Quoth CERT:

A vulnerability in the Java Security Manager allows a Java applet to grant itself permission to execute arbitrary code

If you play minecraft you probably don't want to uninstall java entirely. You just won't be able to run it in a web browser if you disable java in browsers. If you don't use java for anything, on the other hand, there may not be any reason not to uninstall it.

[tootboot]

Mainly I'd just disable the browser plugin since that would be the main infection route.

[Rose]

Depends on the browser.

If you use firefox, it will have been automatically disabled and a massive warning placed on any java stuff you find.

[Rose]

Chrome has it's own built-in java implementation that may or may not have those security holes.

[magistrate101]

For those of you using a chrome-based browser, you can find the java plugin at chrome://plugins
Just scroll down until you find the java entry, and click "Disable".