sourceninja
Diamond Member
- Mar 8, 2005
- 8,805
- 65
- 91
Originally posted by: kamper
Can you give some examples of java holes that have actually be exploited? The only thing I've heard about is the odd advisory that's patched before being announced and never amounts to anything. I'm not challenging you, just curious
go to www.seriall.com and look up a few serial numbers, watch your antivirus go nuts with programs written in java tha try to install keyloggers, trojens etc. (I get so many calls from parents/teachers who's kids went to that site and got them infected, plus our logs at work are riddled with blocked attempts)
They are not exploiting java, bur rather the browser's ablity to load java apps that access your system. They then use the java to download and execute their exploits on windows.
So its like a loader to spyware/virus/etc, not really a virus in itself.
This is one reason why I think firefox should have a java whitelist.
On my previous comment as root. If your distro's support asks you to do something, you can be fairly sure that you know it is safe. But you should remember what they had you do and find out what it did. But if you are going to a user forum and just taking anyone's advice, you better trust the users of that forum very very much, or you better do some research and find out exactly what they are having you do.
Otherwise you might end up with a screwed up system, or even worse, a compromised one.
Yea, it sucks, but not only will you learn something by following my advice, you can be 100% sure nothing bad will ever happen to your system (well as long as you do that and keep your security patches up to date)
Facebook
Twitter