Java ar trebui dezactivat in ciuda actualizarilor

[100R]

(Reuters) - The U.S. Department of Homeland Security warned that a security update of Oracle Corp's Java software for Web browsers does not do enough to protect computers from attack, sticking to its previous advice that the program be disabled.

"It's not like Java got insecure all of a sudden. It's been insecure for years," said Charlie Miller, a computer engineer with Twitter who has previously worked as a security consultant to Fortune 500 firms and as an analyst with the National Security Agency.

Java was responsible for 50 percent of all cyber attacks last year in which hackers broke into computers by exploiting software bugs, according to Kaspersky Lab.

U.S. says Java still risky, even after security update | Reuters

[haos]

Toate platformele din lume au probleme de securitate. Diferenta o face ca atacatorii le exploateaza mai mult pe cele mai utilizate, acolo sansa de succes fiind, evident, mai mare. Nu poti scoate din senin o platforma folosita de miliarde de deviceuri..

[kleampa]

Nu e vorba de scos de tot, ci doar de oprit temporar pana la un nou update.
Update-ul defect e ultimul, cel care a inceput de ieri sa se raspandeasca.

[haos]

Firefox dezactiveaza automat pluginurile cu probleme de securitate. Si apropo de asta, tot recent a blocat si pluginul Flasj tot din aceleasi motive. Cam suspecta coincidenta ca cele mai populare pluginuri sa aiba probleme de securitate majore in acelasi timp.