Another Java Zero-Day Exploit in the Wild

CommanderFrank

CommanderFrank

Cat Can't Scratch It
Joined
May 9, 2000
Messages
75,399
Java is becoming the Swiss cheese of the software world, both being known primarily for the amount of holes each has.:D Yet another vulnerability has been identified and named McRat, a remote-access Trojan affecting specific versions and updates of Java.

People who have no need for Java should consider uninstalling it altogether, uninstalling just the browser plugin, or using a dedicated browser for the handful of sites they frequent that require Java.
Click to expand...
 
I'm starting to wonder if there is any good reason to have Java installed at all. I certainly haven't missed anything since I uninstalled it long ago.
 
They could do with removing the Ask toolbar when you install updates too. I'm fed up having to go through friends/family computers to remove the thing because in their haste they just hit next without reading.
 
2 years without Java and I have not missed it at all. Not even once. I have only encountered one site that wanted it in that time, and it seemed to work reasonably well without it.
 
Wow. I've been using the name McRat for 35 years in motorcycle, auto, and truck competition.

IT WASN'T ME!!! :D
 
This is getting ridiculous. If it weren't for so many of our accountants needing access to healthcare/hospital websites/applications that use java, I'd blow it away across our network. And with that being said, I feel real swell about the security of all my personal medical records and information and how they're being managed.
 
Super-D said:
I'm starting to wonder if there is any good reason to have Java installed at all. I certainly haven't missed anything since I uninstalled it long ago.
Click to expand...

There hasn't been a good reason to install Java for years. The only reason it gets installed is a relic of past good intentioned practices when Java applets were in more common use. That's no longer the case these days, most people should uninstall it.
 
RedSh1rt said:
They could do with removing the Ask toolbar when you install updates too. I'm fed up having to go through friends/family computers to remove the thing because in their haste they just hit next without reading.
Click to expand...

That's just more evidence that it isn't required, what kind of essential software bundles spyware toolbars along with itself? Completely unacceptable.
 
what the actual fuck?

the stock charts at netdania are the only thing I use it for...is it really time to purge my box of this crap?
 
It was full of holes back in 1996 and nothing has changed. If I did not need java because of my job, I would not have it on any system on my network. It is just not secure enough to be trusted with anything.
 
Super-D said:
I'm starting to wonder if there is any good reason to have Java installed at all. I certainly haven't missed anything since I uninstalled it long ago.
Click to expand...

Minecraft.

There is also the fact that J2EE is very good for enterprise applications.

The problem isn't with Java so much as it is with the proprietary Oracle browser plug-in. The solution is to switch to an operating system that has a non-proprietary and far more secure Java plug-in.
 
Between java and flash, its a wonder there are any uninfected PCs left in the world. I uninstalled both of them in the last year, I got sick of them humping my damn leg to do an update every other day. I haven't noticed anything that needs java anymore, other than our hr portal at work.
 
Still waiting for EMET 3.x to properly hook onto windows 8 processes so i can put java on the machines and not have to check every program off to see if it's working.
 
You must log in or register to reply here.
Back
Top