US gov tells computer users to disable Java

[Andavari]

since nuking mine, all my usual sites and software have not been effected.

 

Most sites don't use it nowadays, and if one requires it I'd think twice about using that site especially if it wasn't one I already trust. There's still plenty of software that uses it for instance when looking on a download site, but I always skip such software because I refuse to install JRE ever again.

[Alana]

I agree with the other users here.

 

The concept is good. Universal packages that work everywhere.

But the delivery is awful. I believe trying to target so many different types of OS causes security nightmares for even the best intent on delivery.

 

I can live without Java.

[login123]

Most sites don't use it nowadays, and if one requires it I'd think twice about using that site especially if it wasn't one I already trust. There's still plenty of software that uses it for instance when looking on a download site, but I always skip such software because I refuse to install JRE ever again.

 

I should clarify post 19 I guess.

 

When browsing the web, pretty much any site, even famiar ones, I have a virtualizer app called Powershadow running. That makes it very easy to remove Java, or any other change to your system that you don't want to keep. Just restart. Sadly, Powershadow is not available for any OS after win xp.

 

If that were not so, I would avoid java entirely just like Andavari.

[Alana]

If you right-click power shadow setup under (Vista/7/8) & click properties, then select XPSP2 for compatibility, would it install or function under the newer OS?

 

Granted, compatibility mode isn't perfect & doesn't solve all problems, but there are times when it enables you to run something you need.

 

But that raises another question. As Power Shadow is a trial version, why wouldn't you use something free like Steady State for XP that does the same thing?

It's XP only & made by MS. It also allows you to revert or save system changes on reboot, just like Power Shadow.

 

Or are there features that you use not included in Steady State?

Steady State is a bit hard to find now, being so old, but it is still possible to find.

 

Also, Comodo Time Machine will give you similar capabilities to both Power Shadow & Steady State & works for multiple OS:

http://www.comodo.com/home/backup-online-storage/data-recovery.php

[Nergal]

Alana please don't stray from the subject, if you'd like your questions about powershadow answered, please begin your own topic

[hazelnut]

Remember that emergency update at the weekend to JRE7 update 11?

 

Well at times you think it would make a great movie script, see here the info about the sale and cost of the latest exploit on a hacker forum.

 

http://krebsonsecurity.com/2013/01/new-java-exploit-fetches-5000-per-buyer/

[Alan_B]

I am pleased to observe that Palemoon v15.4 is better protected than Firefox v18 by default.

 

Palemoon has Java blocked by default unless the user specifically enables it.

Apparently Firefox 18 requires user intervention to disable Java

 

See post dated Fri Jan 18, 2013 3:24 pm

http://forum.palemoo...php?f=16&t=1886

[DennisD]

 

As Power Shadow is a trial version, why wouldn't you use something free like Steady State for XP that does the same thing?

 

 

A strange assumption to make after just a couple of days on the forum.

 

I believe Login's version of Power Shadow is the same as mine, and it isn't a trial version.

 

Sorry for the off topic comment guys, just a bit puzzled by that, and wanted to put it straight.

[Alana]

I didn't know about the version you had. I just know when I checked online, it looked like they had a trial version.

 

I just made a couple suggestions, in case it would help run Power Shadow under a modern OS, else alternative that would so it would be possible to continue to revert changes to the system by Java/other programs.

 

I didn't know about the older free version. Sorry.

[hazelnut]

Now java and flash are being allowed into the big hacker arena (Pwn2Own) it'll be really interesting to see what happens in this years contest

 

http://threatpost.com/en_us/blogs/pwn2own-rules-change-again-flash-java-now-fair-game-contestants-011813

 

A successful attack against Flash will earn you $70,000 whereas an attack against Java only $20,000 (I guess because they rate it as too easy )

[mta]

seems a bit pointless to make the target off-limits if there is a successful attack.

that would suggest only one exploit per contest will become known.

why not leave it available, as in past years, and discover a swag of potential exploits in one sitting.