Results 1 to 14 of 14
  1. #1
    lots0 is offline Former Public Member
    Join Date
    November 2003
    Posts
    886
    Blog Entries
    1
    Thanks
    299
    Thanked 571 Times in 251 Posts

    Default Firefox disables Java

    This morning I find out Firefox has disabled java, they won't even allow you to update java. they just disabled it.

    This makes surfing the net a real PIA, secure logons that don't work, entire sites that don't work...

    Not to mention thousands of dollars in java development costs over the last few years.

  2. #2
    universal4's Avatar
    universal4 is online now Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    32,778
    Thanks
    4,059
    Thanked 8,866 Times in 5,670 Posts

    Default

    Did they push out an update the last day or two?

    This is probably due to the vulnerability that was posted this week.

    I am not sure it would work but you might be able to reinstall if you happen to have a download. You might want to unplug the net until after the install and you have the chance to turn off auto-updating.

    I will take a look around to see if I have the download anywhere that is at least somewhat recent but not the last few weeks.

    This is something they WILL have to fix quickly if they want to hold on to marketshare at all since thousands of businesses around the world will be affected.

    Rick
    Universal4
    Gambling World Online Roulette Online Blackjack Live Online Games Sports Betting Horse Racing
    Casino Affiliate Programs
    Hosting and Domain Names
    Gambling Industry Association
    GPWA Moderation by Me and My Big Bad Security Self
    If an affiliate program is not small affiliate friendly (especially small US Affiliate), then they are NOT Affiliate Friendly!

  3. #3
    universal4's Avatar
    universal4 is online now Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    32,778
    Thanks
    4,059
    Thanked 8,866 Times in 5,670 Posts

    Default

    Looks like they are working on it.
    http://support.mozilla.org/en-US/questions/946342

    The problem I have with them is why the HE** did they think it was ok to push out an update that disabled java?

    I didn't see any disclaimer with the update that explained the update did this.

    And worse yet, posting a work-around is NOT posting a fix.(but they didn't post it anyway)

    If you look at that thread, they provide no link to the workaround, only a suggestion that you have to go somewhere else to read more to find one.

    And they mention that dumping a registry section and a reinstall might work, but do NOT list the nest that needs dumped.

    And, if they really wanted to, all they would need to do is provide a reg file that would take care of deleting the keys needed to fix this, if in fact there is a fix.

    If they were foolish enough to put out a version that did this, without a valid fix IN ADVANCE, then inmyopinion they do deserve to lose marketshare over this.

    I mean, have they never heard about java?
    They actually have a fair amount of marketshare due to the misconceptions that Microsoft is the only company that would ever push out updates without disclaimers and a clear and concise way to back out of changes made.

    Rick
    Universal4
    Gambling World Online Roulette Online Blackjack Live Online Games Sports Betting Horse Racing
    Casino Affiliate Programs
    Hosting and Domain Names
    Gambling Industry Association
    GPWA Moderation by Me and My Big Bad Security Self
    If an affiliate program is not small affiliate friendly (especially small US Affiliate), then they are NOT Affiliate Friendly!

  4. #4
    Pmig is offline Private Member
    Join Date
    August 2012
    Posts
    182
    Thanks
    44
    Thanked 77 Times in 54 Posts

    Default

    Folks, java is not the same thing as javascript, so there is no "too many site not working"... Maybe 0.00005% dont work...

    more... whit this security hole, java (from oracle), open more than 850.000.000 machines to hackers... So its better be disabled until oracle come with a fix.

  5. #5
    lots0 is offline Former Public Member
    Join Date
    November 2003
    Posts
    886
    Blog Entries
    1
    Thanks
    299
    Thanked 571 Times in 251 Posts

    Default

    Quote Originally Posted by Pmig View Post
    Folks, java is not the same thing as javascript, so there is no "too many site not working"... Maybe 0.00005% dont work...

    more... whit this security hole, java (from oracle), open more than 850.000.000 machines to hackers... So its better be disabled until oracle come with a fix.
    I know the difference between java and javascript.
    You'll note my first post and the title of this thread specifically says "java".

    I also understand the function and uses of "java", do you?

  6. #6
    Pmig is offline Private Member
    Join Date
    August 2012
    Posts
    182
    Thanks
    44
    Thanked 77 Times in 54 Posts

    Default

    Please dont be rude because this is not your thread, It's only a thread created by you on a public forum...

    As a web developer and programmer, yes, I know very well... But other people here on forum don't have the same knowlege, so Its allways good to remember what is what...

  7. The Following User Says Thank You to Pmig For This Useful Post:

    DanHorvat (14 January 2013)

  8. #7
    lots0 is offline Former Public Member
    Join Date
    November 2003
    Posts
    886
    Blog Entries
    1
    Thanks
    299
    Thanked 571 Times in 251 Posts

    Default

    Personally, I thought your first response was rude and condescending.
    IMO my reply was a snide response to a rude comment in a thread I started.

    As a developer I hope you can figure that all out OK...

  9. #8
    universal4's Avatar
    universal4 is online now Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    32,778
    Thanks
    4,059
    Thanked 8,866 Times in 5,670 Posts

    Default

    Whoa, slow down let's get back on track here...

    I too know the difference, and for companies and businesses around the world that built browser based applications in java, they could very well be pretty screwed by this method of just disabling java the way they did.

    Keep in mind they did this without warning in updates without disclaimers.

    And from what I have seen so far they did not make recovering from this disabling very easy.

    I agree that the risks need to be mitigated, and steps to insure security and all that, but if a company's very survival is based upon a java application they can no longer use because of these updates and blanket idea that it's ok to just turn it off, they have effectively ruined some companies.

    Rick
    Universal4
    Gambling World Online Roulette Online Blackjack Live Online Games Sports Betting Horse Racing
    Casino Affiliate Programs
    Hosting and Domain Names
    Gambling Industry Association
    GPWA Moderation by Me and My Big Bad Security Self
    If an affiliate program is not small affiliate friendly (especially small US Affiliate), then they are NOT Affiliate Friendly!

  10. #9
    lots0 is offline Former Public Member
    Join Date
    November 2003
    Posts
    886
    Blog Entries
    1
    Thanks
    299
    Thanked 571 Times in 251 Posts

    Default

    Sorry, this whole thing has me cranky and put me in a bad mood.

    I just spent a crap load of time and money on some mobile apps that are all java based.

    My question is... If this java exploit is so bad, how come we are not hearing that Android or iphone are disabling java as well...

  11. #10
    Nicole Niki's Avatar
    Nicole Niki is offline New Member
    Join Date
    January 2013
    Location
    California
    Posts
    69
    Thanks
    8
    Thanked 11 Times in 7 Posts

    Default

    Mine works just fine, i'm on mozilla now and java and all is clear.Maybe you need to reinstall java did you think about that?Hope it works.Good luck and let us know if it works!

  12. #11
    lots0 is offline Former Public Member
    Join Date
    November 2003
    Posts
    886
    Blog Entries
    1
    Thanks
    299
    Thanked 571 Times in 251 Posts

    Default

    Quote Originally Posted by Nicole Niki View Post
    Mine works just fine, i'm on mozilla now and java and all is clear.Maybe you need to reinstall java did you think about that?Hope it works.Good luck and let us know if it works!
    Wow, not a clue...

  13. #12
    slotplayer is offline Private Member
    Join Date
    September 2006
    Posts
    1,044
    Thanks
    198
    Thanked 322 Times in 252 Posts

    Default

    has there been a patch released yet?

  14. #13
    lots0 is offline Former Public Member
    Join Date
    November 2003
    Posts
    886
    Blog Entries
    1
    Thanks
    299
    Thanked 571 Times in 251 Posts

    Default

    Quote Originally Posted by slotplayer View Post
    has there been a patch released yet?
    Not that I know of.

    I thought for sure Oracle would push one out by now.

    Oops I guess I was wrong. Orcale did push out one patch but I guess there is still a huge security hole that has not been fixed yet. Here is an article from Gizmodo
    http://gizmodo.com/5977101/oracles-l...o-live-without

    and one from threatpost (most info)
    https://threatpost.com/en_us/blogs/l...s-found-011813
    “We have successfully confirmed that a complete Java security sandbox bypass can be still gained under the recent version of Java 7 Update 11,” Java security researcher Adam Gowdiak of Security Explorations in Poland wrote..
    Don't sound good. They are telling people to learn to live with out java...
    Last edited by lots0; 18 January 2013 at 1:33 pm.

  15. The Following User Says Thank You to lots0 For This Useful Post:

    slotplayer (18 January 2013)

  16. #14
    Seemorf's Avatar
    Seemorf is offline Public Member
    Join Date
    July 2013
    Posts
    10
    Thanks
    0
    Thanked 1 Time in 1 Post

    Default

    Quote Originally Posted by slotplayer View Post
    has there been a patch released yet?

    They have recently released a patch as far as I know, but mine is giving me problems again
    Last edited by Seemorf; 24 July 2013 at 5:59 am.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •