Critical Java zero-day bug is being “massively exploited"

Your fully patched installation of Java isn't safe.

A previously unknown and currently unpatched security hole in the latest version of the Java software framework is under attack online, according to security researchers and bloggers.

Source

A Guy

 

[znod]

good point i run win 8 so i don't worry to much unless for some reason i go to the desktop lol

Yep, and who would want to do that anyway.

How?

You guys must be always in Command Prompt / Terminal or Power Shell or you have ARM -Surface or Phones.... but on desktops we always have to go to the desktop even if it means only peaking to it.

It's inevitable.

I was joking in my quote.

 

[Blosam]

I checked and I do not have Java on my new HP windows 8 lap top computer. But it is on my windows 7 HP lap top computer. What is next? I tried removing it from the Control Panel remove but it didn't work. I guess I will wait to hear from you.

 

[znod]

What browser are you using? This read should help.

 

[Hopachi]

I'll use the jdk 7u11 replacing older one just to make sure I'm up to date when/if I'll use Java development.

The increased security from medium to high was a good choice from Oracle.

 

[azasadny]

I've had the 7U11 update on my main PC since Sunday and no problems yet...

 

[A Guy]

It's time to rewrite Java from scratch, security expert says | PCWorld

A Guy

 

[znod]

I went to the sight to see if I had Java and it said it only did deck computer not lap top. Interesting. I wonder why?Is this a true check up or is Java pressing to be a paid program in order to be a safe sight???? Or are we paying for a fix ???

You'd better go and look in the computer itself not the site (they might automatically install it for you! depending what site that is).

Go to Control Panel -> Program and Features and scroll through the list of installed programs. Java should be there if installed. Also in Control Panel, there should be a "Java Settings" icon or something where settings can be changed.

If that is missing then you don't have Java.

I use the JAVA site to test mine . It does not automatically install it.

How do I test whether Java is working on my computer

View attachment 14908

Control Panel shot--

View attachment 14907

Right, nothing is installed automatically there. In Win8, there is no control panel pane for Java unless possibly if the individual or the OEM installed Java, and Java is not installed when the OS is installed. If installed, it should appear in Control Panel > Programs and Features. If installed, then it may not be enabled. See this link to see if you have Java installed, but not enabled. If not enabled, then the Java plugin will not run--which is what you may want to happen (not run, that is). See post #33 for other information possibly pertinent to you.

 

[Hopachi]

Sorry about the site-thing: they don't install Java automatically. There are also other unofficial sites that require Java plugin and possibly some of those (small number) may trigger an auto-install. The chance is very low on modern browsers.

In Win8, there is no control panel pane for Java unless possibly the individual installed Java,

You don't seem to have understood the situation: even oem's install java on preinstalled OSes and even if you did it by you own hand (individual) it's good to check in Control Panel though because it's always there when installed of course.

and Java is not installed when the OS is installed. See post #33.

I knew that.
Obviously, so why would I check for java then!

No problems here.

 

[startas]

Everything has its own security problems, no matter what code you will write, its just a matter of your knowledge, if you will find a way to do somethign bad with it. People a little bit overextends with all that security, nobody going to **** you in da as, if you will you some java applets few time on the internet, i mean, its not like you have billion dollars and you are saving all your passwords on your computer, and some creepy guys are spying you 28/9 and waiting till you install java, muahahahahahhah !!!!! i never used any antivirus software, and never had any viruses or problems with that stuff

 

[znod]

Sorry about the site-thing: they don't install Java automatically. There are also other unofficial sites that require Java plugin and possibly some of those (small number) may trigger an auto-install. The chance is very low on modern browsers.

In Win8, there is no control panel pane for Java unless possibly the individual installed Java,

You don't seem to have understood the situation: even oem's install java on preinstalled OSes and even if you did it by you own hand (individual) it's good to check in Control Panel though because it's always there when installed of course.

and Java is not installed when the OS is installed. See post #33.

I knew that.
Obviously, so why would I check for java then!

No problems here.

I added the OEM part to post #47 to cover the possibility. I am not aware of Java being installed by OEM's; my experience is that of having to add Java to OEM installs to do Java related things. Do you have evidence otherwise? And, I was replying to medab1, not you, so I am ignoring the rest of your reply.

 

[Hopachi]

Sorry about the site-thing: they don't install Java automatically. There are also other unofficial sites that require Java plugin and possibly some of those (small number) may trigger an auto-install. The chance is very low on modern browsers.

In Win8, there is no control panel pane for Java unless possibly the individual installed Java,

You don't seem to have understood the situation: even oem's install java on preinstalled OSes and even if you did it by you own hand (individual) it's good to check in Control Panel though because it's always there when installed of course.

and Java is not installed when the OS is installed. See post #33.

I knew that.
Obviously, so why would I check for java then!

No problems here.

I added the OEM part to post #47 to cover the possibility. I am not aware of Java being installed by OEM's; my experience is that of having to add Java to OEM installs to do Java related things. Do you have evidence otherwise? And, I was replying to medab1, not you, so I am ignoring the rest of your reply.

That's good to know who you were replying to. Ok.

Some evidence of OEM's installing Java is for instance HP.

I have 2 HP laptops. Each time they provide a preinstalled OS with extra programs.
Here were (on both machines) Java x32 and x64 already installed when I checked directly after first logon.

If this is so with HP, I thought it might be a trend for other OEMs as well but I have no proof for that.

 

[znod]

I agree. Regardless, HP is a biggie so the possibility of OEM installation should be stressed also. As mentioned, I revised my early post to cover this possibility. Thanks for mentioning.

 

[Hopachi]

I agree. Regardless, HP is a biggie so the possibility of OEM installation should be stressed also. As mentioned, I revised my early post to cover this possibility. Thanks for mentioning.

All good.

You're welcome.

 

[azasadny]

Malware impersonates Java patch | PCWorld

 

[azasadny]

US-CERT Continues to Recommend Disabling Java After Oracle Issues Patch (January 14 & 16, 2013) Although Oracle has released a patch for a vulnerability in Java that was being actively exploited, the US Department of Homeland Security's
(DHS's) US Computer Emergency Response Team (US-CERT) is still urging users to disable Java in their browsers. A note from US-CERT said, "This and previous Java vulnerabilities have been widely targeted by attackers, and new Java vulnerabilities are likely to be discovered," and recommends that users disable Java "until adequate updates are available."
Homeland Security still says no to Java - Technology on NBCNews.com
Post-patch, US-CERT continues call to disable Java plug-in - Computerworld
Homeland Security still advises disabling Java, even after update | Security & Privacy - CNET News

 

[pparks1]

Link to disabling Java in your browser
How to turn off Java on your browser – and why you should do it now | Naked Security

 

[slurp812]

I use it for a old wifi web cam I have, that's the only thing I need it for...

 

[KentC]

That's crazy, I'll research as there are certain telecom applications that run off javascript I use.

 

[Ex_Brit]

JavaScript and Java are two different things.

How is JavaScript different from Java?

 

[KentC]

Appreciate the link. Then my major worries are over. Thanks, that was for production servers as they are based off the listed i posted earlier. Makes sense, as we only code as needed like SSL using keytool,etc.