If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(Yahoo)   DHS advises everybody to disable Java immediately. Purple alert   (finance.yahoo.com) divider line 46
    More: Scary, Department of Homeland Security, Java, DHS advises, computer users, hacking attacks, Redwood Shores, web application, Sun Microsystems  
•       •       •

24491 clicks; posted to Geek » on 11 Jan 2013 at 8:29 PM (1 year ago)   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»



Voting Results (Smartest)
View Voting Results: Smartest and Funniest


Archived thread
2013-01-11 09:12:17 PM
3 votes:
Meanwhile, .NET Framework wuvs you.
2013-01-11 09:09:53 PM
3 votes:
I'd rather just disable the DHS instead.
2013-01-11 09:08:56 PM
2 votes:

DownDaRiver: When I turn off Java I get this message from Fark
"Please turn on JavaScript for a better user experience"


You might notice that these words are different...
2013-01-11 09:01:54 PM
2 votes:
Firefox + NoScript + AdBlock Plus + Ghostery is pretty secure.

After that, it's just a matter of doing a little research and having a little common sense. For example, don't click 'Yes' to everything on the web. Clicked 'Yes' to install a 'movie downloader?' You just got hacked. Opened up that 'penis enlargement' e-mail attachment? You just got hacked. Downloaded the first search result you found on P2P? You better believe you just got hacked.
2013-01-11 08:45:31 PM
2 votes:

TEG24601: You only need to disable the browser Plugin, and not run software that you don't know and trust.


Yep... this is the kind of journalism that pisses me off.

"DHS said disable Java"

So, this is important enough that the federal farking government is involved, but not important enough for the AP, the supposed most "respected" (you can't tell that I didn't type that with a straight face) news organization left in this country, can't be bothered to tell us exactly what you're supposed to do. Java, the language, runs in frikkin everything from PCs to automobiles. But yes, the important thing is that you shut it off in your browser. If you're giving desktop applications permission to do things without knowing what they do, then Java isn't the problem.

Besides, these days, every browsers gives you a BIG SCARY WARNING before running a Java applet anyway. Most people get nervous and scared already when they see it pop up. (Ironally, they're more scared of the Java security warnings than they are of the Happy Fun Antivirus popups...)
2013-01-11 08:38:34 PM
2 votes:

TEG24601: You only need to disable the browser Plugin, and not run software that you don't know and trust.


It's my thought that if you're so uninformed as to need the above advice, you should own an apple and only buy from the app store anyway.
2013-01-11 08:34:51 PM
2 votes:

MrEricSir: Who the hell is using Java applets anymore? What is this, 1996?


Secure Mail systems use the hell out of it, and lots of other stuff. We can't do our jobs without Java.
2013-01-11 08:32:42 PM
2 votes:
Who the hell is using Java applets anymore? What is this, 1996?
2013-01-11 08:23:59 PM
2 votes:
You only need to disable the browser Plugin, and not run software that you don't know and trust.
2013-01-12 07:11:21 PM
1 votes:
25.media.tumblr.com
2013-01-12 12:28:06 PM
1 votes:
I tried to follow the instructions for turning off Jave in Chrome, Firefox, etc., but the instructions bear no relation whatsoever to what I see in the dialogue windows on my computer even after I search for and find the specific instructions my version of Windows, the browser, etc.

Like DownDaRiver, I find that disabling Java Platform(TM) S 7 U6 10.6.2.24 interfers with Fark.com. Also, at the moment I can't even quote DownDaRiver's post in this comment box despite re-enabling the plug-in.

Rem: Chrome has, like other browsers and software interfaces (iTunes being one) has gone mad for decluttering its toolbars, which means I can NOT find anything I want to do to or see. Nothing but blank matte-finish digital Chrome--no icons. They have hidden all of the controls and settings I most often use.

Rem: the GD Control Panel has gone the opposite way and is cluttered with everything but the kitchen sink. I can't find anyhing I want to do and the icon labels are not very helpful. Essentially all of the settings and controls are hidden a different way.

All of this stupid geekery is making doing anything at any time with these software interfaces very frustrating, time-consuming and pointless.

If your instructions and illustrations do not match what I see on my screen, they do not help me very much. Perhaps I have different configurations or have more recent or older updates of some stuff, but the GD help files should help, not confuse and frustrate.

It's getting harder and harder to do basic things with the settings, and since the number of settings is muliplying geometrically and the number of things that can annoy or go wrong with them, computer software and hardward maintenance is becoming a Kaftkaesque no-win situation. I'm not a geek but I am better at this than most lusers and I still have a hellacious time, despite more than 30 years of experience with computers.

Hell, I programmed in Fortran before Basic became the main teaching language. I date back to the days when ASCII art and pron was cool. Sort of. No wonder half the population that is online don't even bother to deal with this shiat and just take whatever they're given or insist their children and grand-children deal with it the same way us kids were used to change channels before the remote control went mainstream.
2013-01-12 07:28:44 AM
1 votes:

EngineerAU: MrEricSir: Um... since when did DHS say anything about disabling Javascript?

Company I worked for in the early 00's brought over a senior software engineer from India. Her resume was spectacular. She was going to revolutionize the way we wrote software. Turned out she was an idiot and lied on her resume to get sponsored and her expenses paid to come to the US. Her inability to understand that Java and Javascript are very different technologies was one of the first signs that someone made a huge mistake.

/Don't expect the average internet user to understand the difference


Classic rookie mistake....

Lying on a resume is a bad idea if you are in a role where you have to directly output something of value....
Bartender,
Surgeon,
Pilot,
Engineer,
etc...

Where you CAN lie on your resume and get away with is in positions with soft-skills that don't directly output something. People who facilitate, oversee, manage....there are LOTS of really high-ranking people who have had successful careers for years or even decades before a scandal reveals they lied on their resume. Oddly enough, they were able to perform at that level for years, just fine. Because, ultimately, all they needed to do was make sure the peons were able to work.

Middle to upper-middle management is really the sweet-spot. Too high up and you have to start making some serious business decisions. Then it's your neck on the line, and people might realize you're clueless. But just a step below that; you aren't making the calls. You are 'facilitating' the decisions that get passed down.

Had she been the project manager; she'd have gotten away with it.
2013-01-12 05:45:12 AM
1 votes:
Also, this was from a firefox upgrade from months (years?) ago.

lordargent.com
2013-01-12 03:12:03 AM
1 votes:
Never, ever, EVER enable the java plugin in your browser. How farking stupid are you? It's like having unprotected anal sex in Haiti (Bad Idea Jeans(TM)). The whole thing is a festering pile of zero-days (and negative-days) and has been for years.

Feel free to use it for Minecraft or Jdownloader, but never let it run anything in your browser, where the russkies can easily do a driveby, and you don't have a dashcam.
2013-01-12 12:34:03 AM
1 votes:
I honestly don't know what the hell any of this means.

I turn on the magic box, it shows me porn, I'm happy.
2013-01-12 12:32:09 AM
1 votes:

rockforever: Good luck! I'm behind 7 boxxies!


She does have a cute ass.
2013-01-12 12:29:53 AM
1 votes:
Microsoft has some good lobbyists.
2013-01-11 11:41:29 PM
1 votes:
Goddamn it. I was supposed to fly to Jakarta tomorrow.
2013-01-11 11:16:15 PM
1 votes:
For the love of farking god people...

JAVA =/= JAVASCRIPT
2013-01-11 10:53:41 PM
1 votes:
What they're not saying yet is if they find out you haven't disabled Java, the DHS will send a flying squad of burly TSA agents to conduct a cavity search like you wouldn't believe
2013-01-11 10:38:11 PM
1 votes:

EngineerAU: MrEricSir: Um... since when did DHS say anything about disabling Javascript?

Company I worked for in the early 00's brought over a senior software engineer from India. Her resume was spectacular. She was going to revolutionize the way we wrote software. Turned out she was an idiot and lied on her resume to get sponsored and her expenses paid to come to the US. Her inability to understand that Java and Javascript are very different technologies was one of the first signs that someone made a huge mistake.

/Don't expect the average internet user to understand the difference


A simple phone interview should catch things like that. The hiring manager in your story should be roundly mocked.
2013-01-11 10:38:00 PM
1 votes:
Good luck! I'm behind 7 boxxies!
2013-01-11 10:34:12 PM
1 votes:
I don't have to worry about this sort of thing. I have PC Matic. It keeps me protected.

/and makes my internet speeds faster
2013-01-11 10:20:01 PM
1 votes:
I unplugged my coffee machine.  Am I safe?
2013-01-11 09:42:12 PM
1 votes:
Dear God! The terrorists are going after the PR0N!!! O_O
2013-01-11 09:25:15 PM
1 votes:
images1.wikia.nocookie.net

Shouldn't be too hard, he doesn't look like he's too quick on his feet.
2013-01-11 09:24:06 PM
1 votes:
I just threw my PC down the garbage disposal. Was that the correct course of action?
2013-01-11 09:19:35 PM
1 votes:
Why in the hell should we trust  anything DHS says?
2013-01-11 09:12:15 PM
1 votes:
As someone who works with government agencies (including DHS) who use Java applets on a daily basis, I'm getting a kick out of the idea that DHS is supposedly suggesting people disable their Java plugins.
2013-01-11 09:11:46 PM
1 votes:

MrEricSir: Um... since when did DHS say anything about disabling Javascript?


Company I worked for in the early 00's brought over a senior software engineer from India. Her resume was spectacular. She was going to revolutionize the way we wrote software. Turned out she was an idiot and lied on her resume to get sponsored and her expenses paid to come to the US. Her inability to understand that Java and Javascript are very different technologies was one of the first signs that someone made a huge mistake.

/Don't expect the average internet user to understand the difference
2013-01-11 09:07:56 PM
1 votes:

This Face Left Blank: A security flaw in Java? Unpossible!


Talk to any dumbass Dev that turned into a Java whore and they'll swear up and down to you stupid unfounded sh*t like "the sandbox is secure" and other religious beliefs masquerading as science.
2013-01-11 09:06:40 PM
1 votes:

DownDaRiver: When I turn off Java I get this message from Fark
"Please turn on JavaScript for a better user experience"
No frickin security threat or the pissin DHS is going to keep me from having a better Farking user experience!

/also the nifty little reply button thingy don't work either


Um... since when did DHS say anything about disabling Javascript?
2013-01-11 09:04:39 PM
1 votes:
When I turn off Java I get this message from Fark
"Please turn on JavaScript for a better user experience"
No frickin security threat or the pissin DHS is going to keep me from having a better Farking user experience!

/also the nifty little reply button thingy don't work either
2013-01-11 09:03:25 PM
1 votes:

Amos Quito: Done, long ago. (Firefox)

Sure, it's a bit of a PITA when I have to "allow" certain websites to view videos, features, etc, but pages load much more quickly, and coupled with adblock, I don't see 99% of the shiat.

Happy days.


Actually, not "JavaScript" per your link, but "Java", a different, but similarly-named beast:

http://www.kb.cert.org/vuls/id/625617

http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-ze ro -day-flaw-7000009713/
2013-01-11 09:02:43 PM
1 votes:
more info :http://www.theregister.co.uk/2013/01/10/java_0day/1. go to this site - read and do according to your browser:   http://nakedsecurity.sophos.com/2012/08/30/how-turn-off-java-browser/ 2.You can confirm that Java is no longer installed by visiting http://java.com. Click "Do I have Java?" Click verify and confirm that it says "No working Java was detected on your system."3. don't install it until there is a patch
2013-01-11 08:57:35 PM
1 votes:

jonny_q: But yes, the important thing is that you shut it off in your browser. If you're giving desktop applications permission to do things without knowing what they do, then Java isn't the problem.


The article should have mentioned that this only applies to applets. As I understand it, the vulnerability is a way to break out of the applet sandbox and get full user privileges.

Regular apps -- Java or otherwise -- already run with full user privileges. So those aren't affected.
2013-01-11 08:51:57 PM
1 votes:
Done, long ago. (Firefox)

Sure, it's a bit of a PITA when I have to "allow" certain websites to view videos, features, etc, but pages load much more quickly, and coupled with adblock, I don't see 99% of the shiat.

Happy days.
2013-01-11 08:47:25 PM
1 votes:

Notabunny: Purple alert!

[img.photobucket.com image 260x194]


Please. Add in some clamps and put that man in a dress, and you have a good time going on there.
2013-01-11 08:46:14 PM
1 votes:
Like I trust what the DHS tells me anyway.
2013-01-11 08:43:05 PM
1 votes:

100 Watt Walrus: DHS.gov has nothing about this at all, as near as I can tell.


I found a couple of articles on Slashdot that go into a lot more detail.
2013-01-11 08:39:13 PM
1 votes:

make me some tea: MrEricSir: Who the hell is using Java applets anymore? What is this, 1996?

Secure Mail systems use the hell out of it, and lots of other stuff. We can't do our jobs without Java.


Your mail system runs on a Java applet!? Ho. Lee. Shyte.
2013-01-11 08:37:37 PM
1 votes:

Jon iz teh kewl: and anyone with an Android phone, throw them away


If you got an Oracle JVM to run on Android, I'd be impressed.
2013-01-11 08:37:29 PM
1 votes:
DHS.gov has nothing about this at all, as near as I can tell.
2013-01-11 08:36:54 PM
1 votes:
kasei.us

Blackwatch plaid level threat?
2013-01-11 08:32:53 PM
1 votes:
and anyone with an Android phone, throw them away
2013-01-11 08:22:36 PM
1 votes:
Does this mean I can't play Minecraft?
 
Displayed 46 of 46 comments

View Voting Results: Smartest and Funniest


This thread is archived, and closed to new comments.

Continue Farking
Submit a Link »






Report