Re: How can you tell what this applet is doing ?

2005-05-01 Thread wylbur37
AvianFlux wrote:
>
> There's a way to take out any risks associated with applets that's
> built into the Java Control Panel settings, however.
>
> Launch the Control Panel, disable Java applet cacheing. As a added
> precaution, set Temporary Internet Files storage to 0 MBs. That way
> nothing, Java applications or applets, will be saved on disk.

If you visit a webpage that runs a malicious Java applet,
it'll do its dirty deed whether there's a cache or not, wouldn't it?
So how would the absence of a cache help you?

___
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security


Re: How can you tell what this applet is doing ?

2005-05-01 Thread wylbur37
Joe wrote:
> In article <[EMAIL PROTECTED]>,
> [EMAIL PROTECTED] says...
> > Is there any way of knowing what the applet "Time.class" will do?
> > Just because it's named "Time.class" doesn't mean it has anything
> > to do with time.  (A Java program can be named *anything* to hide
> > its true intent, and could conceivably be planting all sorts of
> > nasty stuff including spyware).
> >
> > Is there a safe way to find out?
>
> You can download it, decompile it and examine the source.

But the source code produced wouldn't be Java, would it?
It would probably be some assembler-looking type of code, right?
(which would be rather difficult to read and trace).

Do you know of any decompiler that would, in effect,
convert a .class file back to a .java file?

___
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security


How can you tell what this applet is doing ?

2005-04-30 Thread wylbur37
The web page at http://misogyny-central.com/fp1.html
runs a Java applet. The pertinent code is shown here ...

  http://misogyny-central.com/ipw-web/date/";
  width="308"
  height="20">





  

Is there any way of knowing what the applet "Time.class" will do?
Just because it's named "Time.class" doesn't mean it has anything
to do with time.  (A Java program can be named *anything* to hide
its true intent, and could conceivably be planting all sorts of
nasty stuff including spyware).

Is there a safe way to find out?

___
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security


How to shut down the Java applets process?

2005-04-24 Thread wylbur37
When I visit a website that uses applets, the Java coffee-cup icon 
shows up in the system tray.
When I right click on the icon, the only choices are ...
  About Java Technology, Go to Java.com, Open Control Panel, 
  Hide Console, Hide Icon.
Even when I left the website, the Java icon was still 
in the system tray. 
Only when I shut down the browser did the icon finally vanish.
Is there a way to shut down the applet process *without* exiting 
the browser?


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security


How to turn off Java applets ?

2005-03-30 Thread wylbur37
When using Mozilla (1.4), where is the setting/option
where you can specify that Java applets should *NOT* be allowed 
to run?

Thanks for your help.


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

___
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security