Do you have adblock enabled?
If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(MSNBC)   Larry Ellison would like you all to shut up about his Java vulnerability already   (msnbc.msn.com) divider line 34
    More: Followup, Java, vulnerability, hacking attacks, Sun Microsystems, prophets, Oracle, web application, DHS  
•       •       •

3036 clicks; posted to Business » on 13 Jan 2013 at 2:58 PM (2 years ago)   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»



34 Comments   (+0 »)
   
View Voting Results: Smartest and Funniest

Archived thread
 
ZAZ [TotalFark]
2013-01-13 09:43:31 AM  
It's company policy never to imply ownership in the event of a security vulnerability.
 
2013-01-13 11:03:06 AM  

ZAZ: It's company policy never to imply ownership in the event of a security vulnerability.


My desktop was vibrating?
 
2013-01-13 11:41:37 AM  
CSB: after DHS put that warning out, I checked which version of Java I was running. I eventually realized I had uninstalled it in one of the previous bouts of endless insecurity and had completely forgotten about it because I couldn't tell the difference.
 
2013-01-13 12:09:08 PM  
We'll shutup when it's fixed, assholes.
 
2013-01-13 12:56:05 PM  
WAIT
it is only in JDK7? the developers kit?
so pretty much nothing to do with the rest of the world?

FFS
so homeland security continues their run of being worthless tools???
LOLOLOLOLOL
 
2013-01-13 01:18:53 PM  
"Repent, Oracle!" says the Ticktockman
 
2013-01-13 02:10:07 PM  

Fark Rye For Many Whores: "Repent, Oracle!" says the Ticktockman


Very nice. +1
 
2013-01-13 03:26:00 PM  
If you want us to shut us about it, how about fixing your code?

I feel no sympathy for them, since when installing security updates, it asks you whether you want to install the Ask toolbar--defaulting to "yes", of course.
 
2013-01-13 03:27:22 PM  

namatad: WAIT
it is only in JDK7? the developers kit?
so pretty much nothing to do with the rest of the world?

FFS
so homeland security continues their run of being worthless tools???
LOLOLOLOLOL


You're trusting Ellison instead? If the fix is to disable the browser plugin, then it's clearly not limited to the JDK.
 
2013-01-13 03:27:34 PM  

namatad: WAIT
it is only in JDK7? the developers kit?
so pretty much nothing to do with the rest of the world?

FFS
so homeland security continues their run of being worthless tools???
LOLOLOLOLOL


In a statement Saturday, the company said it was "aware of a flaw in Java software integrated with web browsers."


Remind me not to hire YOU as my IT Security guy.
 
2013-01-13 03:33:17 PM  

Myria: If you want us to shut us about it, how about fixing your code?

I feel no sympathy for them, since when installing security updates, it asks you whether you want to install the Ask toolbar--defaulting to "yes", of course.


The update is out actually. And annoying. Now I get little pop-ups about running a Java app instead of just the drop down from Chrome at the top. And the clickability of those pop-ups is shiatty.

I don't mind that "Ask toolbar" crap so much but I do find it annoying that every time I update Java it changes the setting for the auto update to on.
 
2013-01-13 03:35:18 PM  

sforce: Myria: If you want us to shut us about it, how about fixing your code?

I feel no sympathy for them, since when installing security updates, it asks you whether you want to install the Ask toolbar--defaulting to "yes", of course.

The update is out actually. And annoying. Now I get little pop-ups about running a Java app instead of just the drop down from Chrome at the top. And the clickability of those pop-ups is shiatty.

I don't mind that "Ask toolbar" crap so much but I do find it annoying that every time I update Java it changes the setting for the auto update to on.


Ok I lied. The update to fix this isn't out because I see an article that says it will be out on Tuesday, however an update was released today by them.
 
2013-01-13 03:44:11 PM  
blogs.pinkelephant.com
 
2013-01-13 03:44:33 PM  

sforce: but I do find it annoying that every time I update Java it changes the setting for the auto update to on.


Umm, this is what the default should be. I'm sorry, but when you let people choose, they don't ever patch ANYTHING. Most people have no idea what Java even is or does and have no reason not to update it. If you have some special need to run insecure, out of date applications, the onus is on you to find and turn off that feature, and then be quarantined on your own, isolated network segment with access to no other important information or servers.
 
2013-01-13 03:45:50 PM  
Java sucks.

/you know you want to come over to the .NET side anyways
 
2013-01-13 03:48:47 PM  

Urbn: sforce: but I do find it annoying that every time I update Java it changes the setting for the auto update to on.

Umm, this is what the default should be. I'm sorry, but when you let people choose, they don't ever patch ANYTHING. Most people have no idea what Java even is or does and have no reason not to update it. If you have some special need to run insecure, out of date applications, the onus is on you to find and turn off that feature, and then be quarantined on your own, isolated network segment with access to no other important information or servers.


I understand that is the default and agree that's how it should be. My issue is that I have my auto update turned off intentionally and every Java update changes the setting back to on, it shouldn't. I have no other regularly updated program that does this besides Java.
 
2013-01-13 04:16:08 PM  

ZAZ: It's company policy never to imply ownership in the event of a security vulnerability.


But I don't own a...
 
2013-01-13 04:57:17 PM  

Urbn: Most people have no idea what Java even is or does and have no reason not to update it.


I'm one of those people. Although I'm quickly concluding that what it does is "nothing." Can someone direct me to a website I care about that's different because Java isn't running? Or a program on my PC? Or something? Because frankly I'm thisclose to uninstalling the damn thing entirely because half the time it updates I forget to uncheck that damn ask.com box and end up having to scrub that piece of shiat off my computer.

Seriously: What I'm seeing is annoyingware accompanied by constant security problems, including one so bad it made DHS take a break from feeling up people at the airport one the one hand and nothing at all on the other hand.
 
2013-01-13 05:04:32 PM  

Manfred J. Hattan: Urbn: Most people have no idea what Java even is or does and have no reason not to update it.

I'm one of those people. Although I'm quickly concluding that what it does is "nothing." Can someone direct me to a website I care about that's different because Java isn't running? Or a program on my PC? Or something? Because frankly I'm thisclose to uninstalling the damn thing entirely because half the time it updates I forget to uncheck that damn ask.com box and end up having to scrub that piece of shiat off my computer.

Seriously: What I'm seeing is annoyingware accompanied by constant security problems, including one so bad it made DHS take a break from feeling up people at the airport one the one hand and nothing at all on the other hand.


Off the top of my head, things like Webex (and other online conferencing) and company SSL VPNs often require java. There was a time also when some banks were doing dumb things with Java or even ActiveX (shudder) on their websites, but I don't know that that's the case now (at least mine doesn't). Most general websites don't. I disable Java in my browser until those rare occasions I need it.
 
2013-01-13 05:32:37 PM  
Some stupid Java update came down a few weeks ago and effectively killed my computer. Uninstalled it and things are all happy again.
 
2013-01-13 05:39:54 PM  
JAVA - The answer to the question that no one asked.
 
2013-01-13 06:07:11 PM  
When the TSA tells you to turn it off it's getting serious - actually, no joke.

I deinstalled it yesterday and was impressed that REVO Pro found no artifacts after deinstall.
 
2013-01-13 06:54:59 PM  

2wolves: Fark Rye For Many Whores: "Repent, Oracle!" says the Ticktockman

Very nice. +1


yes, bonus points for the Ellison .
 
2013-01-13 06:56:44 PM  

Urbn: Umm, this is what the default should be. I'm sorry, but when you let people choose, they don't ever patch ANYTHING. Most people have no idea what Java even is or does and have no reason not to update it. If you have some special need to run insecure, out of date applications, the onus is on you to find and turn off that feature, and then be quarantined on your own, isolated network segment with access to no other important information or servers.


Never had a real job, eh?

Most of my users need it for various things, but at least for Webex sessions. Like a normal person, I don't allow my users to install whatever random shiat they want, which includes Java. I keep things like Java and Flash updated through group policy.

And Sun provides a way to disable auto-update through a GPO, but it'shiat or miss because it's dependent on OS architecture and sometimes it just doesn't work since, like any other GPO, it can err out for various reasons. Then my helpdesk gets calls because my users are getting UAC prompts for Java.

A better way would be that they, along with Adobe, would stop releasing extraordinarily buggy, vulnerability-prone shiat. That and stop bundling it with other garbage software that has its own unique problems on top of Java's.

Manfred J. Hattan: Can someone direct me to a website I care about that's different because Java isn't running? Or a program on my PC? Or something? Because frankly I'm thisclose to uninstalling the damn thing entirely because half the time it updates I forget to uncheck that damn ask.com box and end up having to scrub that piece of shiat off my computer.


You don't have to uninstall it. You can just disable the plugin in your browser for a bit and see if anything doesn't work. If you go for a few weeks and nothing stops working, uninstall it.
 
2013-01-13 07:23:45 PM  

neilbradley: JAVA - The answer to the question that no one asked.


Not necessarily. You've got the internet, and you have in-browser applications that you can't predict the architecture they'll be running on. The JVM certainly alleviates some of the problems stemming from that.

Using it as a platform on its own? Yeah, bad. .NET/Mono is better suited for that.
 
2013-01-13 08:59:33 PM  
It seems to me that Java has had more reports of exploits since Sun was acquired by Oracle. Did they keep Sun's Java team or replace them with college kids to help Larry finance the America's Cup?
 
2013-01-13 09:03:53 PM  

sforce: Myria: If you want us to shut us about it, how about fixing your code?

I feel no sympathy for them, since when installing security updates, it asks you whether you want to install the Ask toolbar--defaulting to "yes", of course.

The update is out actually. And annoying. Now I get little pop-ups about running a Java app instead of just the drop down from Chrome at the top. And the clickability of those pop-ups is shiatty.

I don't mind that "Ask toolbar" crap so much but I do find it annoying that every time I update Java it changes the setting for the auto update to on.


What pissed me the hell off is that it always waits until I'm in the middle of a game of Skyrim to pop up the message asking me if I want to update. After the umpteenth time it did that, I uninstalled the motherfarker.
 
2013-01-13 09:06:34 PM  
The Java Utopia of "Code Once, run everywhere" was overrun by its shiatty emulator and Java's bugs. I wish it would stop being used. II wish Android didn't run Java at all.
 
2013-01-13 10:23:29 PM  
So does that explain why Java has been pushing McCaffery virus protection with the updates I have been receiving lately?
 
2013-01-13 11:28:10 PM  

sonorangal: McCaffery virus protection


Is that like buying a Polex watch?
 
2013-01-14 12:42:10 AM  
What's the difference between Larry Ellison and God? God doesn't think he's Larry Ellison.
/oldie but goodie
 
2013-01-14 01:39:54 AM  

Fark Rye For Many Whores: "Repent, Oracle!" says the Ticktockman


I don't think I've logged in for a year, and I'm doing so just to tell you what a good job that post was. Kudos.
 
2013-01-14 07:06:42 AM  

Urbn: sonorangal: McCaffery virus protection

Is that like buying a Polex watch?


More like a Sorny television.
 
2013-01-14 03:58:10 PM  
 
Displayed 34 of 34 comments

View Voting Results: Smartest and Funniest


This thread is archived, and closed to new comments.

Continue Farking
Submit a Link »
Advertisement
On Twitter





In Other Media


  1. Links are submitted by members of the Fark community.

  2. When community members submit a link, they also write a custom headline for the story.

  3. Other Farkers comment on the links. This is the number of comments. Click here to read them.

  4. Click here to submit a link.

Report