Matrix Games Forums

A look through the keyhole #10!The Age of Shadows on Distant Worlds starts now!Paypal System UpdateDistant Worlds: Shadows Final Teaser!Distant Worlds: Legends gets Updated!Recruiting Testers for Commander: the Great War on Mac!Armageddon invasion starts in 2014Command Rommels Panzers in Battle Academy!Servers UpdateThe Deal goes Fourth!		 Forums  Register  Login  Photo Gallery  Member List  Search  Calendars  FAQ 

My Profile  Inbox  Address Book  My Subscription  My Forums  Log Out

Federal Warning About Java

 
View related threads: (in this forum | in all forums)

Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [New Releases from Matrix Games] >> War in the Pacific: Admiral's Edition >> Federal Warning About Java Page: [1]
Login
Message << Older Topic   Newer Topic >>
Federal Warning About Java - 1/16/2013 4:51:48 PM   
Icedawg


Posts: 1322
Joined: 1/27/2006
From: Upstate New York
Status: offline 		Has anyone else heard about this? The feds are warning Americans to disable Java as it supposedly has lots of security issues related to identity theft. Is this a matter of the feds having some axe to grind with Oracle, or something to do with keeping the population in fear, or is there a serious threat of being hacked?

As far as I know, I only need Java for Tracker. However, since AE is my life (okay, I'm exaggerating a bit), I don't want to disable it if not absolutely necessary.

Can anyone enlighten me here?
Post #: 1
RE: Federal Warning About Java - 1/16/2013 4:55:18 PM   
GreyJoy


Posts: 4958
Joined: 3/18/2011
Status: offline
quote:

ORIGINAL: Icedawg
However, since AE is my life (
), I don't want to disable it if not absolutely necessary.



+1

Sometimes i feel like Sheldon Cooper....but much much less intelligent

(in reply to Icedawg)
Post #: 2
RE: Federal Warning About Java - 1/16/2013 5:01:18 PM   
sanderz

 

Posts: 334
Joined: 1/8/2009
From: Devon, England
Status: offline 		theres some comments on this in the tracker thread

basically you can have java 7 installed as default (which has a bug fix) and java 6 called to specifically run tracker.

this is 'safer' rather than totally safe as even the patched java 7 is, i think, still not totally fixed

also i have no idea if the virus can call java6 rather than use the default (java7)

< Message edited by sanderz -- 1/16/2013 5:02:18 PM >

(in reply to GreyJoy)
Post #: 3
RE: Federal Warning About Java - 1/16/2013 5:06:47 PM   
Lokasenna


Posts: 503
Joined: 3/3/2012
From: Iowan in MD/DC
Status: online 		Playing this game, I at first thought this was about a travel warning TO Java, not about USING Java.

If you've got Firefox, you should install NoScript and then only allow scripts (usually this means the Java and Flash that's on the page) from websites you trust. Warnings about Java are nothing new, really. But it's no more dangerous than anything else you do over the 'net on your computer, aside from being a bit more ubiquitous. As long as you follow best practices, you should be fine.

(in reply to sanderz)
Post #: 4
RE: Federal Warning About Java - 1/16/2013 5:12:04 PM   
Colonel Mustard

 

Posts: 113
Joined: 11/22/2012
From: Upstate New York USA
Status: offline 		I'm playing as Allies vs. AI. It's March 20, 1942 and I can assure you, Java IS being disabled.

_____________________________

"It's all according to how your boogaloo situation stands, you understand."

(in reply to Lokasenna)
Post #: 5
RE: Federal Warning About Java - 1/16/2013 5:12:46 PM   
GreyJoy


Posts: 4958
Joined: 3/18/2011
Status: offline
quote:

ORIGINAL: Colonel Mustard

I'm playing as Allies vs. AI. It's March 20, 1942 and I can assure you, Java IS being disabled.



ahahahaha

(in reply to Colonel Mustard)
Post #: 6
RE: Federal Warning About Java - 1/16/2013 5:20:09 PM   
witpqs

 

Posts: 12400
Joined: 10/4/2004
From: Argleton
Status: offline 		Also in the Tracker thread, see my comments about how Chrome operates. Other browsers might have slightly different strategies but by now the major ones latest versions all should have something to you manage Java so that random web sites can not run it on their own.

_____________________________

Intel Monkey: https://sites.google.com/site/staffmonkeys/

(in reply to GreyJoy)
Post #: 7
RE: Federal Warning About Java - 1/16/2013 6:52:51 PM   
jeffk3510


Posts: 3379
Joined: 12/3/2007
From: Kansas
Status: offline 		I received a similar message...something to do with Homeland Security..

_____________________________

Follow our WiTPAE team game against bilbow and hartwig.modrow http://www.matrixgames.com/forums/tm.asp?m=2965846&mpage=1&key=?

Follow my Rising Sun game against Schanilec. http://www.matrixgames.com/forums/tm.asp?m=3294296&mpage=1&key=�

(in reply to witpqs)
Post #: 8
RE: Federal Warning About Java - 1/16/2013 6:54:03 PM   
wdolson

 

Posts: 7047
Joined: 6/28/2006
From: Near Portland, OR
Status: offline 		I thought this was about a travel advisory too. I've used NoScript for a while now. It's sometimes a bit irritating to enable scripts on new sites I go to, but it does offer protection if I accidentally end up at a dodgy site which can happen if I misspell a common URL or from searching for something.

Running a Java app on your system should be safe if you know what you're running.

Bill

_____________________________

WitP AE - Test team lead, programmer

(in reply to witpqs)
Post #: 9
RE: Federal Warning About Java - 1/16/2013 9:00:44 PM   
Lecivius


Posts: 657
Joined: 8/5/2007
From: Denver
Status: offline 		Running a Java App is ok. The problem is in the Java Update program, which is used to open a path into your machine. It's a VERY insidious little loop. As long as you don't auto update, but rather go to the Oracle website & update, you should be fine. The problem is that Oracle sets up a back door in Java to advise on updates, and then sets a change in your Registry to allow it. This allows the hacker with the know-how to back end any machine running it.

(in reply to wdolson)
Post #: 10
RE: Federal Warning About Java - 1/16/2013 10:04:51 PM   
Dixie


Posts: 9537
Joined: 3/10/2006
From: UK
Status: offline
quote:

ORIGINAL: wdolson

I thought this was about a travel advisory too. I've used NoScript for a while now. It's sometimes a bit irritating to enable scripts on new sites I go to, but it does offer protection if I accidentally end up at a dodgy site which can happen if I misspell a common URL or from searching for something.

Running a Java app on your system should be safe if you know what you're running.

Bill


I use the same excuse around Mrs Dixie

_____________________________



Spring chicken to ****ehawk in one easy lesson.

(in reply to wdolson)
Post #: 11
RE: Federal Warning About Java - 1/16/2013 10:32:33 PM   
Cap Mandrake

 

Posts: 14057
Joined: 11/15/2002
From: Southern California
Status: offline 		Hory Crap! Thata sigrine is rearry funny.




Attachment (1)

(in reply to Dixie)
Post #: 12
RE: Federal Warning About Java - 1/16/2013 10:42:24 PM   
wdolson

 

Posts: 7047
Joined: 6/28/2006
From: Near Portland, OR
Status: offline

_____________________________

WitP AE - Test team lead, programmer

(in reply to Cap Mandrake)
Post #: 13
RE: Federal Warning About Java - 1/16/2013 11:06:02 PM   
Cap Mandrake

 

Posts: 14057
Joined: 11/15/2002
From: Southern California
Status: offline
quote:

ORIGINAL: Lecivius

Running a Java App is ok. The problem is in the Java Update program, which is used to open a path into your machine. It's a VERY insidious little loop. As long as you don't auto update, but rather go to the Oracle website & update, you should be fine. The problem is that Oracle sets up a back door in Java to advise on updates, and then sets a change in your Registry to allow it. This allows the hacker with the know-how to back end any machine running it.


There are two things about this that concern me.

1) This auto-update exploit, isn't that analagous to the old IE vulnerability? If so, how could they (the Java folks) possibly NOT foresee this?

2) Why are we learning about this from Homeland Security?

(in reply to Lecivius)
Post #: 14
RE: Federal Warning About Java - 1/16/2013 11:23:22 PM   
Lecivius


Posts: 657
Joined: 8/5/2007
From: Denver
Status: offline
quote:

ORIGINAL: Cap Mandrake


quote:

ORIGINAL: Lecivius

Running a Java App is ok. The problem is in the Java Update program, which is used to open a path into your machine. It's a VERY insidious little loop. As long as you don't auto update, but rather go to the Oracle website & update, you should be fine. The problem is that Oracle sets up a back door in Java to advise on updates, and then sets a change in your Registry to allow it. This allows the hacker with the know-how to back end any machine running it.


There are two things about this that concern me.

1) This auto-update exploit, isn't that analagous to the old IE vulnerability? If so, how could they (the Java folks) possibly NOT foresee this?

2) Why are we learning about this from Homeland Security?



Not sure on Homeland Security. Perhaps there is something else I don't know about. It wouldn't be the 1st time. As to the IE vulnerability, that was (and still has not been completely) patched by MS. The Java hole is just that. A hole. Your machine will get an echo that it "thinks" is a Java update request, and then update. Depending on your settings, you might not even know it happened. Even if you do, it's the Java Update screen, a real one that pops up. I only learned of it during a recent Ethical Hacker seminar

(in reply to Cap Mandrake)
Post #: 15
RE: Federal Warning About Java - 1/17/2013 1:13:37 AM   
msieving1

 

Posts: 313
Joined: 3/23/2007
Status: offline
quote:

ORIGINAL: Icedawg

Has anyone else heard about this? The feds are warning Americans to disable Java as it supposedly has lots of security issues related to identity theft. Is this a matter of the feds having some axe to grind with Oracle, or something to do with keeping the population in fear, or is there a serious threat of being hacked?

As far as I know, I only need Java for Tracker. However, since AE is my life (okay, I'm exaggerating a bit), I don't want to disable it if not absolutely necessary.

Can anyone enlighten me here?


Apparently, the DHS warning applies to Java in web browsers, not stand-alone Java applications.

(in reply to Icedawg)
Post #: 16
RE: Federal Warning About Java - 1/17/2013 6:52:07 PM   
geofflambert


Posts: 2153
Joined: 12/23/2010
From: St. Louis
Status: online
quote:

ORIGINAL: Lokasenna

Playing this game, I at first thought this was about a travel warning TO Java, not about USING Java.




The travel advisory still holds. There are still Japanese soldiers hiding out in the jungle who think the war is still on.

(in reply to Lokasenna)
Post #: 17
RE: Federal Warning About Java - 1/17/2013 9:25:44 PM   
The Gnome


Posts: 1201
Joined: 5/17/2002
From: Philadelphia, PA
Status: offline 		Also, for the tech novice javascript is to java as eggplant is to eggs. They just share a name, but don't have anything else in common.

The warnings are for java and the run time engines that need to be installed on your computer.

(in reply to geofflambert)
Post #: 18
RE: Federal Warning About Java - 1/17/2013 11:21:34 PM   
wdolson

 

Posts: 7047
Joined: 6/28/2006
From: Near Portland, OR
Status: offline
quote:

ORIGINAL: geofflambert
The travel advisory still holds. There are still Japanese soldiers hiding out in the jungle who think the war is still on.


Somehow 90 year old soldiers who have been living off the land for nearly 70 years with 70 year old weapons don't really scare me too much.

Bill

_____________________________

WitP AE - Test team lead, programmer

(in reply to geofflambert)
Post #: 19
RE: Federal Warning About Java - 1/18/2013 2:36:18 AM   
PaxMondo


Posts: 4427
Joined: 6/6/2008
Status: online
quote:

ORIGINAL: wdolson


quote:

ORIGINAL: geofflambert
The travel advisory still holds. There are still Japanese soldiers hiding out in the jungle who think the war is still on.


Somehow 90 year old soldiers who have been living off the land for nearly 70 years with 70 year old weapons don't really scare me too much.

Bill

Bill,

They are now in their 4th generation ... these are now 18 yo's armed with Ipod's.

_____________________________

Pax

(in reply to wdolson)
Post #: 20
RE: Federal Warning About Java - 1/18/2013 2:54:48 PM   
geofflambert


Posts: 2153
Joined: 12/23/2010
From: St. Louis
Status: online
quote:

ORIGINAL: wdolson


quote:

ORIGINAL: geofflambert
The travel advisory still holds. There are still Japanese soldiers hiding out in the jungle who think the war is still on.


Somehow 90 year old soldiers who have been living off the land for nearly 70 years with 70 year old weapons don't really scare me too much.

Bill


Their bayonets are rusty and that makes for a really nasty wound. Besides, Gilligan, the Skipper too, Mary Ann, Ginger, the Howells and the Professor are still out there, aren't they?

(in reply to wdolson)
Post #: 21
RE: Federal Warning About Java - 1/18/2013 3:56:12 PM   
jetjockey


Posts: 211
Joined: 11/23/2009
Status: offline
quote:

ORIGINAL: msieving1


quote:

ORIGINAL: Icedawg

Has anyone else heard about this? The feds are warning Americans to disable Java as it supposedly has lots of security issues related to identity theft. Is this a matter of the feds having some axe to grind with Oracle, or something to do with keeping the population in fear, or is there a serious threat of being hacked?

As far as I know, I only need Java for Tracker. However, since AE is my life (okay, I'm exaggerating a bit), I don't want to disable it if not absolutely necessary.

Can anyone enlighten me here?


Apparently, the DHS warning applies to Java in web browsers, not stand-alone Java applications.


Not being tech savvy, I don't know if this applies, but I just had my yahoo.com account (free) hacked; I use this account for my Firefox homepage. Fortunately I have not used this site for email in years and did not have any contacts saved, but the hackers did access my sent file and spammed those addresses. I've changed all my passwords and swept this account clean. Are there any other step I should take?

(in reply to msieving1)
Post #: 22
RE: Federal Warning About Java - 1/18/2013 3:57:10 PM   
Treetop64


Posts: 722
Joined: 4/12/2005
From: 519 Redwood City, CA - BASE (Hex 218, 70)
Status: offline
quote:

ORIGINAL: Cap Mandrake


quote:

ORIGINAL: Lecivius

Running a Java App is ok. The problem is in the Java Update program, which is used to open a path into your machine. It's a VERY insidious little loop. As long as you don't auto update, but rather go to the Oracle website & update, you should be fine. The problem is that Oracle sets up a back door in Java to advise on updates, and then sets a change in your Registry to allow it. This allows the hacker with the know-how to back end any machine running it.


There are two things about this that concern me.

1) This auto-update exploit, isn't that analagous to the old IE vulnerability? If so, how could they (the Java folks) possibly NOT foresee this?

2) Why are we learning about this from Homeland Security?



Maybe Oracle has been blacklisted as a terrorist organization?


_____________________________



"Junk is something you've kept for years and throw away three weeks before you need it"

(in reply to Cap Mandrake)
Post #: 23
RE: Federal Warning About Java - 1/18/2013 4:19:17 PM   
Lecivius


Posts: 657
Joined: 8/5/2007
From: Denver
Status: offline
quote:

ORIGINAL: jetjockey


quote:

ORIGINAL: msieving1


quote:

ORIGINAL: Icedawg

Has anyone else heard about this? The feds are warning Americans to disable Java as it supposedly has lots of security issues related to identity theft. Is this a matter of the feds having some axe to grind with Oracle, or something to do with keeping the population in fear, or is there a serious threat of being hacked?

As far as I know, I only need Java for Tracker. However, since AE is my life (okay, I'm exaggerating a bit), I don't want to disable it if not absolutely necessary.

Can anyone enlighten me here?


Apparently, the DHS warning applies to Java in web browsers, not stand-alone Java applications.


Not being tech savvy, I don't know if this applies, but I just had my yahoo.com account (free) hacked; I use this account for my Firefox homepage. Fortunately I have not used this site for email in years and did not have any contacts saved, but the hackers did access my sent file and spammed those addresses. I've changed all my passwords and swept this account clean. Are there any other step I should take?


Happens a lot. So much, in fact, I have to wonder if the problem is more on Yahoo than an end user. Happened to me, and for the life of my I have no idea how it happened. And it did NOT happen on my Hotmail account, which I also access from the same PC.

(in reply to jetjockey)
Post #: 24
RE: Federal Warning About Java - 1/18/2013 4:38:54 PM   
witpqs

 

Posts: 12400
Joined: 10/4/2004
From: Argleton
Status: offline 		Yahoo is notorious for being porous to hackers. Hotmail was for a time but it seems Microsoft has cleaned it up.

_____________________________

Intel Monkey: https://sites.google.com/site/staffmonkeys/

(in reply to Lecivius)
Post #: 25
RE: Federal Warning About Java - 1/18/2013 7:33:14 PM   
tocaff


Posts: 3978
Joined: 10/12/2006
From: USA now in Brasil
Status: offline 		Symantec has informed their customers that they are protected if they use auto updates for the anti virus and that Oracle has a patch for this.

_____________________________

Todd

I never thought that doing an AAR would be so time consuming and difficult.
www.matrixgames.com/forum/tm.asp?m=2080768

(in reply to witpqs)
Post #: 26
RE: Federal Warning About Java - 1/19/2013 3:59:17 AM   
jcjordan

 

Posts: 1527
Joined: 6/27/2001
Status: offline 		Not being totally into pc techs I'm more a mainframe guy but I've got Java7 update9 along w/ several Java 6 updates installed. Should I update to the current Java manually - the popup did come up to remind me but I've not actually run it as when it popped up I wasn't attached to the internet & I normally only have the setting where it sends me a reminder/popup to do it not actually do the update for me. I'm having a problem where I can't change the default open a file w/ a certain program & wondering if this may be part of the problem. I can change to some defaults like notepad/word/adobe but not the one I need to even when I go into browse & tell it which program (it doesn't take for some reason). I did do some Windows & Adobe updates the other day. Any other possibilities to see about on changing what program a file will open w/ ?

(in reply to tocaff)
Post #: 27
RE: Federal Warning About Java - 1/19/2013 7:21:12 PM   
crsutton


Posts: 6203
Joined: 12/6/2002
From: Maryland
Status: online 		If you have Norton you should be fine. They just sent an email confirming that they have protection now for the holes in Java. You really can't live without Java.

_____________________________

"As an online discussion grows longer, the probability of a comparison involving Nazis or Hitler approaches one." Godwin's Law

(in reply to jcjordan)
Post #: 28
RE: Federal Warning About Java - 1/19/2013 11:01:40 PM   
jetjockey


Posts: 211
Joined: 11/23/2009
Status: offline
quote:

ORIGINAL: crsutton

If you have Norton you should be fine. They just sent an email confirming that they have protection now for the holes in Java. You really can't live without Java.


True, but you must still have the latest update:

Java version 7, update #11 (jre 7u11) or version 6, update #38 (jre 6u38) @ (http://www.java.com)

Both Norton and Oracle seem to prefer version 7, especially now that Oracle intends to discontinue support of version 6 shortly; you will still be able to download the latest update, for now at least.

Since Tracker seems to require version 6, after I uninstalled version 6 and then installed version 7, I reinstalled version 6; Tracker still works fine, but I am crossing my fingers. My computer recognizes version 7 and Tracker is directed to use version 6; everyone's happy.

One other note: WRT PCs I am just a duffer, at best. If I've erred, I hope to be corrected before my computer explodes.

< Message edited by jetjockey -- 1/19/2013 11:03:03 PM >

(in reply to crsutton)
Post #: 29
RE: Federal Warning About Java - 1/19/2013 11:31:56 PM   
tbothy

 

Posts: 7
Joined: 4/8/2012
Status: offline 		My work around is to copy the JAVA 6 installation into my tracker directory and then point tracker to this copy of java and then uninstall all versions of JAVA and then INSTALL the new updated JAVA (Java version 7, update #11 (jre 7u11))

(in reply to Icedawg)
Post #: 30
Page:   [1]
All Forums >> [New Releases from Matrix Games] >> War in the Pacific: Admiral's Edition >> Federal Warning About Java Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

0.203