3 ms·
To be clear -- neither of these vulnerabilities is likely to cause much damage in the wild for anyone who has installed the new version. Applets don't run anym
by jtheory 14y ago
To be clear -- neither of these vulnerabilities is likely to cause much damage in the wild for anyone who has installed the new version.
Applets don't run anymore unless you explicitly click through to authorize them.
If you aren't expecting your game to run, etc., you click "no".
I'm disappointed about all this (particularly since it's on its way to destroying my side business, which relies on applets), but I'm also frustrated by the reporting -- Java applets are still more secure than ActiveX used to be, right? There's a sandbox, and now applets won't even run at all without explicit permission from the user.
That's pretty close to "don't go to shady websites and install software they offer you" at this point.
- kunil 14y agoIf my mom sees a pop up while browsing, she will always click yes.
- meaty 14y agoShe needs reprogramming. May I suggest using a 2x1.
- jtheory 14y agoIf she clicks yes to all popups, then Java is a risk to her even with all security bugs patched, because I can request permission to get out of the sandbox with a signed applet, and if she approves I can do whatever I like with her computer. Of course, if she's opening odd-looking links in her email anyway (which is how she'd get to a site that might include a dangerous applet) there are likely all kinds of attack vectors that she's vulnerable to.