Serious vulnerability roaming around

[Zeagle]

Rapid7 Metasploit BainCapital....mmmm k. Sure I'll download their little JAR file and put it in my trusted area....NOT

 

And even the Java version checker link on their blog page points somewhere other than Oracle...

[gyrene81]

ya know Zeagle, there is a reason they don't "show you the code"...they don't want every dipstick that lacks any common sense tossing the stuff around more than it is now, or making some nastier variants to spread around.

This is a bit concerning but then again I find 50% of the websites I browse through google as it is... Linux + stumbleupon is a great passtime btw.

i was addressing the way chrome reports activity to google. it's not just location tracking or browsing history via cookies. supposedly google stopped some of it a few revisions back but, it's more likely they just stopped making it so transparent. the google search engine does location tracking anyway regardless of which browser you use.

i can't believe you use stumbleupon...eewww.

[MrRiplEy[H]]

i can't believe you use stumbleupon...eewww.

Hmm what's wrong with it? Lots of great stuff can be found there. I especially like the 'nude art' tab 

[MrRiplEy[H]]

Update: Oracle has issued a security hotfix for Java 7 so update it if you must use it. http://www.oracle.com/technetwork/java/javase/downloads/index.html

[MrRiplEy[H]]

Update: Oracle has issued a security hotfix for Java 7 so update it if you must use it. http://www.oracle.com/technetwork/java/javase/downloads/index.html

Oops looks like Oracle didn't manage to fix anything in the end.. time to block that thing again: http://reviews.cnet.com/8301-13727_7-57504640-263/new-vulnerabilities-found-in-latest-java-update/

[100Coogn]

I use Microsoft Security Essentials and even that reports the Java update as a severe security risk.

Coogan

[MrRiplEy[H]]

I use Microsoft Security Essentials and even that reports the Java update as a severe security risk.

Coogan

Firefox also reports and prompts to disable the java-plugin (at least on linux, dunno about windows).