So, about this java thing.

[cbayer]

I just went to open my sunday puzzle and got a message that said my java was out of date, did not include the most recent security updates and had been disabled.

It gave me the option of updating with one click.

Should I trust this? Is there a legitimate way to see if this is for real or not?

[woodsprite]

1. My IT director hubby said go out to

Oracle's website instead of trusting the popup if you have to update.

[cbayer]

2. Thanks, woodsprite. It seemed kind of off to me.

[woodsprite]

3. I don't even trust Adobe notifications

I got burnt at work one time with an Adobe Reader update.

Good luck on the Java update. I guess i'll have to bite and
Do it tomorrow at work. They just sent an email telling
People who don't need to use java to turn it off. The only
thing is, my job is coding web forms that use java and
jquery snippets. We don't write the code ourselves, but
Use snippets our programmers have written, but they won't
work if we have to turn it off.

[Agschmid]

4. I would not.

I also only go to the websites to update once I get a notification.

[freshwest]

5. I haven't seen any Apple updates for these for a while. Just iTunes, Remote, etc.

I haven't updated in years, and haven't had a problem, but then I don't do as much as I used to - I only read, don't see video much anymore. I wonder about search researches that toss a pdf at you. Sometimes it's listed, and other times they just start. I never take any binary files, etc. unless I sought them out in the first place. Could a pdf carry a virus?

[cbayer]

6. There is some kind of significant Java breach right now that has led to all

kinds of groups telling people to turn their java off until the fix is available.

I did turn mine off a couple of days ago, but would like to turn it back on.

[glinda]

7. I read that Apple did it automatically for the Mac. Am I wrong? Where do I

need to go to find out if I need to do anything?

[cbayer]

8. I couldn't tell you. I haven't received any updates and I still have java disabled for now.

[glinda]

9. Where do I go to disable it? I went to Utilities

to Java Preferences and it has Java SE 6 64bit and Java SE 6 32 bit checked in boxes. Do I uncheck them? Am I in the wrong spot?

[cbayer]

10. You have to do it in your browser. What one(s) are you using.

It's super easy in Safari.

Drop done the main safari tab while in the browser.

Preferences.

Security.

Uncheck: enable Java.

That's it.

[glinda]

11. Also Firefox...how????

[glinda]

12. Done cept for Firefox. : > )

[cbayer]

13. I don't use it, so I don't know, but there was a link somewhere on DU that

addressed every kind of browser and specifically what you needed to do.

You could probably find something on the Mozilla site.

[glinda]

14. Looked and followed but those tabs didn't come up for me.

Will keep looking. Thanks. You have been a great help. My pea-brain will figure it out somehow.

[cbayer]

15. FWIW, I got another notice that a fix is available at the Oracle site.

I think I am going to download it today and re-enable my Java.

I miss my puzzles!

[glinda]

16. Do we need both the Java and the Java FX? Am sooo confused.

Or is this not the "patch"???

[cbayer]

17. Yes, the patch (or security update or whatever they are calling it).

[freshwest]

22. Did you add on NoScript? It disables the heck outta Java. Every site says 'You have disabled Java.'

I give them permission on a case by case basis and move on to something else if I don't trust them. I also have Firefox set up to reject untrusted through Google.

[cbayer]

18. Update - Java Security 'Fix' Is Disguised Malware Attack

http://www.informationweek.com/security/application-security/java-security-fix-is-disguised-malware-a/240146589

[REP]

19. Did you see this?

http://www.macrumors.com/2013/01/11/apple-blocks-java-7-on-os-x-to-address-widespread-security-threat/

[cbayer]

20. I had heard that they disabled using an update, which explains why

I got a message that it was disabled prior to my manually doing so.

So, as it stands now, I guess I can enable it manually and Apple will take care of it when they actually have a fix and actually re-enable it?

Or am I reading this all wrong?

[REP]

21. Well, you can leave it turned off in your browser settings

Just don't mess with the plist