Re: [NF] Java Security issue

2013-01-15 Thread Alan Bourke
Well, there's slightly hysterical warnings as usual. The vulnerability lies with the Java browser plugins, or did until Oracle patched it. Server-side Java, desktop java apps were not affected. On Mon, Jan 14, 2013, at 04:13 PM, James Harvey wrote: Been getting a number of WARNINGS about a new

Re: [NF] Java Security issue

2013-01-15 Thread MB Software Solutions, LLC
Yeah Andy...what are you talking about??? On 1/15/2013 2:42 AM, Paul Hill wrote: What's that? On 15 January 2013 04:40, AndyHC a...@hawthorncottage.com wrote: The old ms 'behaviours' use it (really!). AndyD ___ Post Messages to:

Re: [NF] Java Security issue

2013-01-15 Thread AndyHC
DHTML - part of the bumpy evolution htmldhtmlweb2html5 ms behaviours appeared after most IE users started disabling activeX objects ('cos world and scripting dogs had discovered some version of: filesystemobject Filesystemobject is New FileSystemObject() ) - like the other steps in the

Re: [NF] Java Security issue

2013-01-15 Thread AndyHC
... more info at: http://msdn.microsoft.com/en-us/library/bb250408(v=vs.85).aspx my example used one of the IE built-in ('Default') behaviors - more on these at: http://technet.microsoft.com/en-us/subscriptions/ms531081(v=vs.85).aspx cheers (_)? (_)? On 15/01/2013 22:56, MB Software

Re: [NF] Java Security issue

2013-01-14 Thread Paul Hill
Yes. Switch it off in the browser. Client side almost nothing uses it these days anyway. On 14 January 2013 16:13, James Harvey jhar...@hanoverpa.com wrote: Been getting a number of WARNINGS about a new security issue with Java. Not sure how concerned we should be? Should we turn Java off

RE: [NF] Java Security issue

2013-01-14 Thread Kurt
- -Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Paul Hill Sent: Monday, January 14, 2013 12:35 PM To: profoxt...@leafe.com Subject: Re: [NF] Java Security issue Yes. Switch it off in the browser. Client side almost nothing uses it these days anyway

Re: [NF] Java Security issue

2013-01-14 Thread Ted Roche
: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Paul Hill Sent: Monday, January 14, 2013 12:35 PM To: profoxt...@leafe.com Subject: Re: [NF] Java Security issue Yes. Switch it off in the browser. Client side almost nothing uses it these days anyway. On 14 January 2013 16:13, James

RE: [NF] Java Security issue

2013-01-14 Thread Richard Kaye
Subject: Re: [NF] Java Security issue That's just the beginning. Here's some recommendations on safe browser usage from your friends in the US gov't: https://www.us-cert.gov/reading_room/securing_browser/#Internet_Explorer On Mon, Jan 14, 2013 at 12:56 PM, Kurt k...@isssusa.com wrote

Re: [NF] Java Security issue

2013-01-14 Thread M Jarvis
http://bits.blogs.nytimes.com/2013/01/13/u-s-agency-warns-of-java-software-problem/?ref=technology from the article: Apple stopped shipping its computers with Java enabled last year, largely because of security concerns, but said it was remotely disabling the Java 7 plug-in on Macs where it

Re: [NF] Java Security issue

2013-01-14 Thread MB Software Solutions, LLC
On 1/14/2013 11:13 AM, James Harvey wrote: Been getting a number of WARNINGS about a new security issue with Java. Not sure how concerned we should be? Should we turn Java off as they recommend?

Re: [NF] Java Security issue

2013-01-14 Thread Allen
One thing I noticed using firefox is that many web site call google stuff. Is there a way to ban that without losing google search, maps etc Al -Original Message- That's just the beginning. Here's some recommendations on safe browser usage from your friends in the US gov't:

Re: [NF] Java Security issue

2013-01-14 Thread MB Software Solutions, LLC
On 1/14/2013 1:40 PM, M Jarvis wrote: http://bits.blogs.nytimes.com/2013/01/13/u-s-agency-warns-of-java-software-problem/?ref=technology from the article: Apple stopped shipping its computers with Java enabled last year, largely because of security concerns, but said it was remotely

Re: [NF] Java Security issue

2013-01-14 Thread Allen
Yes, including removing software apple doesn't like. Al -Original Message- So Apple can just come into anyone's computer and do stuff? ___ Post Messages to: ProFox@leafe.com Subscription Maintenance:

Re: [NF] Java Security issue

2013-01-14 Thread Paul Hill
Subject: Re: [NF] Java Security issue Yes. Switch it off in the browser. Client side almost nothing uses it these days anyway. On 14 January 2013 16:13, James Harvey jhar...@hanoverpa.com wrote: Been getting a number of WARNINGS about a new security issue with Java. Not sure how

RE: [NF] Java Security issue

2013-01-14 Thread Richard Kaye
The NoScript plug-in is also a good way to opt out of analytics or any 3rd party JS. -- rk -Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Ted Roche Sent: Monday, January 14, 2013 3:20 PM To: profoxt...@leafe.com Subject: Re: [NF] Java Security

Re: [NF] Java Security issue

2013-01-14 Thread MB Software Solutions, LLC
On 1/14/2013 3:34 PM, Richard Kaye wrote: The NoScript plug-in is also a good way to opt out of analytics or any 3rd party JS. +1 -- Mike Babcock, MCP MB Software Solutions, LLC President, Chief Software Architect http://mbsoftwaresolutions.com http://fabmate.com

Re: [NF] Java Security issue

2013-01-14 Thread AndyHC
The old ms 'behaviours' use it (really!). AndyD On 14/01/2013 23:04, Paul Hill wrote: Yes. Switch it off in the browser. Client side almost nothing uses it these days anyway. On 14 January 2013 16:13, James Harvey jhar...@hanoverpa.com wrote: Been getting a number of WARNINGS about a

Re: [NF] Java Security issue

2013-01-14 Thread Paul Hill
What's that? On 15 January 2013 04:40, AndyHC a...@hawthorncottage.com wrote: The old ms 'behaviours' use it (really!). AndyD On 14/01/2013 23:04, Paul Hill wrote: Yes. Switch it off in the browser. Client side almost nothing uses it these days anyway. On 14 January 2013 16:13,