Firefox disables Java

[lots0]

This morning I find out Firefox has disabled java, they won't even allow you to update java. they just disabled it.

This makes surfing the net a real PIA, secure logons that don't work, entire sites that don't work...

Not to mention thousands of dollars in java development costs over the last few years.

[universal4]

Did they push out an update the last day or two?

This is probably due to the vulnerability that was posted this week.

I am not sure it would work but you might be able to reinstall if you happen to have a download. You might want to unplug the net until after the install and you have the chance to turn off auto-updating.

I will take a look around to see if I have the download anywhere that is at least somewhat recent but not the last few weeks.

This is something they WILL have to fix quickly if they want to hold on to marketshare at all since thousands of businesses around the world will be affected.

Rick
Universal4

[universal4]

Looks like they are working on it.
http://support.mozilla.org/en-US/questions/946342

The problem I have with them is why the HE** did they think it was ok to push out an update that disabled java?

I didn't see any disclaimer with the update that explained the update did this.

And worse yet, posting a work-around is NOT posting a fix.(but they didn't post it anyway)

If you look at that thread, they provide no link to the workaround, only a suggestion that you have to go somewhere else to read more to find one.

And they mention that dumping a registry section and a reinstall might work, but do NOT list the nest that needs dumped.

And, if they really wanted to, all they would need to do is provide a reg file that would take care of deleting the keys needed to fix this, if in fact there is a fix.

If they were foolish enough to put out a version that did this, without a valid fix IN ADVANCE, then inmyopinion they do deserve to lose marketshare over this.

I mean, have they never heard about java?
They actually have a fair amount of marketshare due to the misconceptions that Microsoft is the only company that would ever push out updates without disclaimers and a clear and concise way to back out of changes made.

Rick
Universal4

[Pmig]

Folks, java is not the same thing as javascript, so there is no "too many site not working"... Maybe 0.00005% dont work...

more... whit this security hole, java (from oracle), open more than 850.000.000 machines to hackers... So its better be disabled until oracle come with a fix.

[lots0]

Folks, java is not the same thing as javascript, so there is no "too many site not working"... Maybe 0.00005% dont work...

more... whit this security hole, java (from oracle), open more than 850.000.000 machines to hackers... So its better be disabled until oracle come with a fix.

I know the difference between java and javascript.
You'll note my first post and the title of this thread specifically says "java".

I also understand the function and uses of "java", do you?

[Pmig]

Please dont be rude because this is not your thread, It's only a thread created by you on a public forum...

As a web developer and programmer, yes, I know very well... But other people here on forum don't have the same knowlege, so Its allways good to remember what is what...

[lots0]

Personally, I thought your first response was rude and condescending.
IMO my reply was a snide response to a rude comment in a thread I started.

As a developer I hope you can figure that all out OK...

[universal4]

Whoa, slow down let's get back on track here...

I too know the difference, and for companies and businesses around the world that built browser based applications in java, they could very well be pretty screwed by this method of just disabling java the way they did.

Keep in mind they did this without warning in updates without disclaimers.

And from what I have seen so far they did not make recovering from this disabling very easy.

I agree that the risks need to be mitigated, and steps to insure security and all that, but if a company's very survival is based upon a java application they can no longer use because of these updates and blanket idea that it's ok to just turn it off, they have effectively ruined some companies.

Rick
Universal4

[lots0]

Sorry, this whole thing has me cranky and put me in a bad mood.

I just spent a crap load of time and money on some mobile apps that are all java based.

My question is... If this java exploit is so bad, how come we are not hearing that Android or iphone are disabling java as well...

[Nicole Niki]

Mine works just fine, i'm on mozilla now and java and all is clear.Maybe you need to reinstall java did you think about that?Hope it works.Good luck and let us know if it works!

[lots0]

Mine works just fine, i'm on mozilla now and java and all is clear.Maybe you need to reinstall java did you think about that?Hope it works.Good luck and let us know if it works!

Wow, not a clue...

[slotplayer]

has there been a patch released yet?

[lots0]

has there been a patch released yet?

Not that I know of.

I thought for sure Oracle would push one out by now.

Oops I guess I was wrong. Orcale did push out one patch but I guess there is still a huge security hole that has not been fixed yet. Here is an article from Gizmodo
http://gizmodo.com/5977101/oracles-l...o-live-without

and one from threatpost (most info)
https://threatpost.com/en_us/blogs/l...s-found-011813

“We have successfully confirmed that a complete Java security sandbox bypass can be still gained under the recent version of Java 7 Update 11,” Java security researcher Adam Gowdiak of Security Explorations in Poland wrote..

Don't sound good. They are telling people to learn to live with out java...

[Seemorf]

has there been a patch released yet?

They have recently released a patch as far as I know, but mine is giving me problems again