3 ms·
Who exactly is exposed to these flaws? Anyone who has attempted to run an applet on any modern browser in the past 6 months will know it now involves a lot of
by jtheory 13y ago
Who exactly is exposed to these flaws?
Anyone who has attempted to run an applet on any modern browser in the past 6 months will know it now involves a lot of work -- clicking through several dialogs and warnings even if you do have the latest version.
If you don't have the latest version, some browsers make it impossible, and others let you go ahead only after you acknowledge that you're putting your immortal soul in dire peril (or something along those lines).
Java on OS X will self-disable if you don't use it for a while, so then you have to figure out how to enable it, again, if you even figure out what has happened.
In Safari even when everything is enabled you see a gray box with small text saying something like "plugin disabled" in it. You have to click the small text (though it doesn't look like a link or button) to access the menu to enable it and continue.
I suppose they must be targeting corporate machines running XP and IE7 or something like that? I don't think most other people are succeeding in running legitimate Java applets, let alone anything that would be a security risk.
- iSnow 13y agoThere are still lots of OS X 10.6 installs out there which cannot run Java 7
- jtheory 13y agoYes, and they have no running Java at all unless they've either jumped through some serious hoops to get it working again after Apple disabled it, or they don't install security updates.
- iSnow 13y agoThis is only true for Browser applets - granted that's the worst security hole. Coding in and running Java applications is fine on 10.6, but you have to stick to Java 6
- jtheory 13y agoFor people downloading & running untrustworthy applications, Java has nothing to do with their security problems. The security holes are only an issue in the context of Java applets -- Java applications don't run in the sandbox anyway (i.e., they're like other applications).
- coldtea 13y ago>Who exactly is exposed to these flaws? Anyone who has attempted to run an applet on any modern browser in the past 6 months will know it now involves a lot of work -- clicking through several dialogs and warnings even if you do have the latest version. Some hundrends of millions of people still running XP, Windows 2000 or Vista, with IE or Firefox?
- 616c 13y agoAs someone who works in a coporate-ish environment and has had to get Java running on 10.7 and 10.8 with Safari, I am surprised someone who does not have a background in systems administration could get it working. Unless the bulk of the population knows what symlinking is, but I doubt it.