 antdudeA Ninja AntPremium,VIP
join:2001-03-25
kudos:2
 ·RoadRunner Cable
| reply to scelli
Re: Java Runtime Environment (JRE) 6 Update 4 said by scelli:said by antdude:I'd love to get rid of Java! But some places still require them. Example: Online timecards.  Personally, I am getting a little tired of all the security hassles involved with Java, Active X, Shockwave, Flash and the rest of their ilk. Supposedly, these programs/scripts are written in order to enhance a PC user's Internet experience and sometimes they indeed do so, such as the Auto Quote feature on this forum that I believe uses Java Script. However, enough is enough. Most of the other stuff I've had to endure from websites using JS and Active X is just plain Mickey Mouse junk, and I'm now genuinally considering uninstalling Sun Java completely on my Win XP SP2 system as well as seriously curtailing most Active X add-ons.  I can't be the only one here at DSLR that feels this way, too. ActiveX is worse than Java IMO.
--
Ant @ The Ant Farm: »antfarm.ma.cx ... Please do not IM/e-mail me for technical support. Use the forum (I check often)! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer. |
|
KiwiPremium
join:2003-05-26
USA/MidWest
kudos:1 Reviews:
·Comcast
| reply to scelli
I still use IE, though this drive is not for serious endeavors.
But, if you are using IE the element connected to DSLR is under security/custom/scripting/active scripting. Not java or ActiveX.
I turn active script to disable when I'm going around the net, unless I'm getting an MS patch ALL ActiveX is is disabled, Java has gone and along with that some GUI toys, but no matter life goes on.
Not much room left for the bad guys or drive by, eh.
But, I understand your point. Right along with that Flash junk. |
|
|
|
 Name GamePremium
join:2002-07-07
North Myrtle Beach, SC
kudos:6 | reply to antdude
said by antdude:ActiveX is worse than Java IMO. I am not going to agree with you on this one.
My reasoning goes like this..
Currently we have an active thread of someone who still can't get awvvt.dll off their PC (that now others are just post trashing with Linux stuff) 
»Well I got a virus
But if you understand why he and others are still getting whacked, then Sun Java is NOT your friend. They yelled and screamed to get their place in the SUN on your PC..
After the dust settled everyone started downloading versions of their stuff to replace the MS JAVA. But facts are each version they put out was full of holes that were exploited agressively making many PC users think that their MS OS was crap..blaming it all on Microsoft.
But if you take a closer look you will find that these JAVA experts at Sun not only do not know how to secure their stuff..THEY WON'T EVEN HELP YOU OR WARN YOU TO CLEAN UP THE OLD VERSIONS OF THEIR JAVA LEFT ON YOUR PC WHEN YOU INSTALL A NEW VERSION and that compounds the problem.
why is that important.
Just look at this thread...
VundoFix V6.5.0
Checking Java version...
Java version is 1.4.2.3
Old versions of java are exploitable and should be removed.
Scan started at 10:30:44 PM 8/31/2007
awvvt.dll removed.
»hjt log- not sure whats going on
So..not only do we have Sun Java creating new versions/updates trying to plug security holes..we have users who will find older versions of their JAVA in the add/remove programs..that still are being exploited..even though the user updated their JAVA..go figure.
At least when Microsoft updates or patches the OS..you are not left with garbage.
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
Name GamePremium
join:2002-07-07
North Myrtle Beach, SC
kudos:6
1 edit | reply to SUMware
Vundo & Java
------------------------------------------------------------
Whenever a VUNDO infection is seen a HJT log you can GUARANTEE that an out of date vulnerable version of Sun Java will be on the computer
You MUST do this as part of the cleaning process
Updating Java:
Download the latest version of Java Runtime Environment (JRE) 6.0.
Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on the download to install the newest version.
Note: java 6 is not compatible with Windows 98 or ME so use the latest 5.10 update for that »www.java.com/en/download/manual.jsp
Edited to update Java version
»forums.techguy.org/malware-remov···ava.html
--
Gladiator Security Forum »www.gladiator-antivirus.com/
Missing Kids
»www.missingkids.com/ |
|
1 edit | reply to SUMware
Well I've read most of this thread.
When I open the Java Control Panel, select the Update tab, then click the Update Now button, I get a window that tells me I already have the latest version Java installed which is Java 6 Update 3.
This happens on both XP and Vista PCs.
I'm not updating anything. |
|
1 edit | Yep...same for me as well...The Java control panel in three computers (Windows XP Professional - 32-bit, Windows XP Professional - 64-bit, and Windows Vista Home Premium - 32-bit) all indicated that I have the current version of Update 3. I updated only one of my computers, Windows Vista Home Premium notebook. I left the other two to notify me whenever their ready to update...probably never.
OH...and I went to the following web page on all three systems and it also tells me I have the "latest version of JRE"...Update 3! 
»www.java.com/en/download/help/testvm.xml
--
wisperTEL Wireless ISP - 2.4GHz - 802.11b - 2.0MB/256kbps | Dell Dimension 4550/WinXP Pro/SP2/768MB Ram -- HP tx1000 Notebook/Vista Home Premium/2GB Ram | NAT Router/Firewall | D-Link DI-524 Wireless Router | Blackberry Curve 8310 (Red) |
|
| reply to AB
said by AB:If you need help with an installation, you need to give more details about the problems you're having. If you want to register a complaint about Sun, you're at the wrong website. No, I don't need help with *my* installation and this is NOT a problem that only affects *me*. It is a problem of Sun's download site. It is *their* problem. I have already registered a complaint with Sun on their website and I am here to warn others what is happening.
Version 6 Update 4 has already been out for more than 3 weeks. The download available at www.java.com and through automatic update is still Version 6 Update 3. That *is* a problem. |
|
 ABPremium
join:2006-04-04
Leesburg, VA
kudos:3
 ·Verizon Online DSL
| said by HK007 :
. . Version 6 Update 4 has already been out for more than 3 weeks. The download available at www.java.com and through automatic update is still Version 6 Update 3. That *is* a problem. It hasn't been much of a problem for me-- I've installed and am currently using 'Update 4'.
Who says this release is 'official', anyway?
Maybe it is, maybe it isn't. I've seen no documentation so far indicating definitively one way or the other.
But if Sun doesn't consider it 'official' yet, that's why it's not linked to as the 'current version'.
And FileHippo, a software download site that tends to stay quite current with their releases, also still has 'Update 3' listed as the current one. |
|
SUMwarePremium
join:2002-05-21
kudos:2 | reply to SUMware
Which Official Version? »www.sun.com/ -> click on - Java for games, apps, and a whole lot more = V6U3
»www.sun.com/ -> Downloads -> drop down menu - Java SE = V6U4
Yep, weird. |
|
 ExidorPremium
join:2001-05-04
Brampton, ON | reply to SUMware
Re: Java Runtime Environment (JRE) 6 Update 4 The download link above refers to the release as Java SE Runtime Environment 6 Update 4 First Customer Ship for Windows, English. (my bold)
This Java.com FAQ offers an explanation for the different JRE versions available (i.e. Update 3 vs. Update 4)....but you have to reeeeally want to believe it.  |
|
SUMwarePremium
join:2002-05-21
kudos:2 | Or you can just download V6U4 from here:
»java.sun.com/javase/downloads/index.jsp |
|
| reply to SUMware
The JRE v6 update4 appears to have been pulled. The link results in:
Page Not Found
The product you requested is not available at this time. |
|
KiwiPremium
join:2003-05-26
USA/MidWest
kudos:1 | Some people deleted the whole thing, after downloading |
|
PrntRhdPremium
join:2004-11-03
Fairfield, CA Reviews:
·Comcast
| reply to beachbouy
said by beachbouy:The JRE v6 update4 appears to have been pulled. The link results in: Page Not Found The product you requested is not available at this time. Site works for me, must have been a temporary server issue. |
|
| said by PrntRhd  Site works for me, must have been a temporary server issue.
[/BQUOTE :Yes, must have been temporary... it is now working for me too. |
|
| reply to beachbouy
said by beachbouy:The JRE v6 update4 appears to have been pulled. The link results in: Page Not Found The product you requested is not available at this time. Down for maintenance. |
|
antdudeA Ninja AntPremium,VIP
join:2001-03-25
kudos:2 Reviews:
·RoadRunner Cable
| reply to scelli
said by scelli:said by antdude:I'd love to get rid of Java! But some places still require them. Example: Online timecards. Personally, I am getting a little tired of all the security hassles involved with Java, Active X, Shockwave, Flash and the rest of their ilk. Supposedly, these programs/scripts are written in order to enhance a PC user's Internet experience and sometimes they indeed do so, such as the Auto Quote feature on this forum that I believe uses Java Script. However, enough is enough. Most of the other stuff I've had to endure from websites using JS and Active X is just plain Mickey Mouse junk, and I'm now genuinally considering uninstalling Sun Java completely on my Win XP SP2 system as well as seriously curtailing most Active X add-ons. I can't be the only one here at DSLR that feels this way, too. Yeah, I hear you. Everything has security holes now. Hardwares too! I remember back before we had Internet and BBS', we didn't have to worry about these things too much except virus from disks.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
| reply to SUMware
"Whenever a VUNDO infection is seen a HJT log you can GUARANTEE that an out of date vulnerable version of Sun Java will be on the computer"
This is just not true today (maybe it was in 2006). I have seen vundo on systems with Java 1.6.0_x builds and no other older Java. |
|
| reply to bluepoint
The site does not work for me. I got the following error message:
Your download transaction cannot be approved. Contact Customer Service.
I have already clicked the checkbox "I agree to the Java SE Runtime Environment 6 License Agreement". |
|
