Disable Java in your browser, stat.

[Tx Redneck]

http://blog.avast.com/2013/01/11/another-java-exploit/

Another Java exploit; disable immediately
Leave a commentGo to comments
A serious new vulnerability notice about Java exploits has been issued by the Department of Homeland Security’s Cybersecurity Division. Java 7 Update 10 and earlier contain a vulnerability that can allow a remote attacker to execute malware on vulnerable systems.

A French researcher called Kafeine discovered that a number of websites using the exploit are able to download files directly to the victim’s computer, and execute actions such as installing ransomware. “Hundreds of thousands of hits daily where i found it,” he wrote on his blog. “This could be a mayhem.”

Disable Java in web browsers

Some webpages may include content or apps that use the Java plug-in. There is no fix for this yet, so it is recommended that you protect yourself by disabling Java in your particular browser. Please see our previous blog How do I disable Java in my browser for instructions.

For a higher level of security, it is possible to entirely prevent any Java apps from running in a browser by de-selecting Enable Java content in the browser in the Java Control Panel under the Security tab. Disabling Java through the Java Control Panel will disable Java in all browsers.


Saved and Texan by the Grace of God, Redneck by choice.

[stangin4lyfe]

How to turn off your java:

http://nakedsecurity.sophos.com/2012/08/30/how-turn-off-java-browser/

[Geor!]

They'll probably do like they did with the last one and not give two shits about fixing it. Fuck Oracle.

[Snatch Napkin]

They already have a patch. It's listed in the link stangn4life posted.

Is this not an acceptable patch? That link was posted 8-30-12.

[Tx Redneck]

No, this is a new exploit.

Saved and Texan by the Grace of God, Redneck by choice.

[Snatch Napkin]

Doneski

[Snatch Napkin]

I've been getting a prompt from java that updates are available. Have they patched the issue, or is this the bug?

[Tx Redneck]

Sorry, forgot to post yesterday, they issued a patch. Apply liberally.

Saved and Texan by the Grace of God, Redneck by choice.

[Snatch Napkin]

Tanks

[Tx Redneck]

Looks like we need to keep Java disabled unless it's absolutely necessary.

http://nakedsecurity.sophos.com/2013/01/20/java-hacker-boasts-of-finding-two-more-unpatched-holes/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

Java hacker boasts of finding two more unpatched holes

Serial Java fault-finder Adam Gowdiak has embarrassed Oracle yet again.

Gowdiak hit the headlines last year when he reported a vulnerability, waited for Oracle's response, and then upped the ante with a comeback vuln.

It's déjà vu all over again, with the Polish researcher publicly bragging about two brand-new vulnerabilities he's found even since Oracle's most recent patch just a week ago.

Gowdiak, who claims in his tagline to "bring security research to the new level," is critical of the way Oracle patched the latest hole.

He implies that although it locked the office door in update 7u11, Oracle left the entrance to the building open, which he considered as good as an invitation to find another way in.

[Unicorn Jeff]

Uninstalled till they fix this bullshit.

[Tx Redneck]

No need to uninstall completely unless you have no use for it, just keep the browser plugins disabled.

[hunt4m3x]

Fucking pussies.

I surf with Internet explorer plus java. no anti virus.

[Tx Redneck]

And you suck at sarcasm.

Saved and Texan by the Grace of God, Redneck by choice.