Identifiez-vous
> > > Java Compromised


Messages dans le sujet: Java Compromised
bundler
Membre

Nbr msg: 14
Enregistré: 05/10/2003
Ecrit le: 23/01/2013 01:40

I was advised to disable Java on my computer as it has been compromised. What is my best way to sync withour Java?
Jelan
Admin

Nbr msg: 11520
Enregistré: 05/05/2001
Ecrit le: 23/01/2013 03:33

Hi bundler,

Java itself is not the culprit as always... People just tend to make shortcuts and over simplify things... So java is perfectly safe and any program running on your computer in Java is also safe, which includes Magelo Sync.

So you might ask, what is this java security flaw people are talking about ? It is the integration of Java in your browsers, which we call applets. There are java little/big program that are downloaded and executed by your browser. Since it's a remote program, there is a security sandbox around it so it cant access your files for example, at least, not without asking and there are many things it cant do for obvious reasons. A security flaw in this context, means, that people have found a way to escape the sandbox.

Oracle has released Java 7 Update 11 which fixes the security issue. But if you don't think you need java integration in your browser or there is another security flaw running in the wild, you can disable java integration in your browser settings which has nothing to do with Java programs installed and running on your computer. If you do so, you will be on the safe side.