Security Threat

If the little round indicator button on the left is ORANGE, then check the Topics in this Forum for new Announcements from your Admin. Team that you haven't read yet!

Moderators: Hippy Chippy, Seejay, Chippy Ned

Post Reply
User avatar
Hippy Chippy
Site Admin
Posts: 4172
Joined: Mon Oct 13, 2003 8:09 am
Given Name: Rick
Surname: Pengilly
Original Official Number: R42630
Rank and Rate: CPOMTH3
Intake or Class: 13th MOBI Intake
Date of Enlistment: July 1962
Date of Discharge: July 1974
Ships and Establishments.: HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
City or Town: Lake Munmorah
State: NSW
Country: Australia
Occupation: Retired
Location: Mosman, NSW
Contact:
Contact Hippy Chippy

Security Threat

Post by Hippy Chippy »

This warning just came in from one of my newsletters today, a trusted source, so I’ve taken their advice and temporarily
disabled Java...

Here’s how to disable Java... :type: http://www.java.com/en/download/help/di ... rowser.xml" onclick="window.open(this.href);return false;

I’ll post any updates, once Java gives the ‘ALL CLEAR’...

:director: WARNING

New Java Exploit - Disable Java NOW!

I’m beginning to sound like a broken record, but there was another Java exploit discovered and this one is the worst kind of security hole. It’s one that allows a hacker to install malware or viruses without your knowledge simply by visiting a website. The exploit has been confirmed by Bitdefender, a popular anti-virus company, as being actively used by hackers on the internet to compromise computer systems.

The really dangerous part is it appears to affect all installations of Java and there is no known way to stop it outside of disabling or uninstalling Java. Oracle, the makers of Java, are aware of the exploit and are doubtlessly working on a fix, but no ETA or information has been released.

The easiest and most secure way to disable Java is to follow the instructions provided by Oracle by clicking here. You can re-enable Java after Oracle patches Java and you download an updated version. Disabling Java may cause certain websites to perform differently as Java will not be available to them so keep that in mind if you experience any unusual performance.

-Tim

It's all over the Internet... :shock: More information on the Java Threat:

:type: http://www.allvoices.com/contributed-ne ... -explained" onclick="window.open(this.href);return false;

:type: http://www.macrumors.com/2013/01/11/app ... ty-threat/" onclick="window.open(this.href);return false;

:type: http://threatpost.com/en_us/blogs/nasty ... -it-011013" onclick="window.open(this.href);return false;

:type: http://www.theglobeandmail.com/technolo ... le7234545/" onclick="window.open(this.href);return false;

Even more recent:

:type: http://news.yahoo.com/oracle-updates-ja ... ector.html" onclick="window.open(this.href);return false;



More if you choose to temporarily uninstal Oracle's Java:

:type: http://nakedsecurity.sophos.com/how-to- ... -explorer/" onclick="window.open(this.href);return false;

Particularly handy if you opt to uninstall Java completely:

"You can confirm that Java is no longer installed by visiting :type: http://java.com" onclick="window.open(this.href);return false;. Click "Do I have Java?"
Click verify and confirm that it says "No working Java was detected on your system."

This is what you'll see...
Image

Click on "Do I have Java" then click on the Verify Java version button that
appears (as shown below...)

Image

If you've successfully uninstalled Java completely, this is what you'll see...

Image

[-X DON'T HIT THE DOWNLOAD 'Download Java Now' BUTTON as that will
simply reinstall Java...!!!

Bear in mind tha literally BILLIONS of websites use Java, so hopefully Oracle
will 'get all their sh!t in the same sock' pretty quickly, so you can reinstall it again...

:-k It probably wouldn't hurt to do a FULL VIRUS SCAN :axe: on your PC/
compter after you've done all that... :hiding:

I'll endeavour to keep you posted... :thumbright:
Image
Rick Pengilly
WEBMASTER
Ex-CPOMTH3
R42630
13th MOBI Intake
July'62 to July'74
HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
Top
User avatar
Hippy Chippy
Site Admin
Posts: 4172
Joined: Mon Oct 13, 2003 8:09 am
Given Name: Rick
Surname: Pengilly
Original Official Number: R42630
Rank and Rate: CPOMTH3
Intake or Class: 13th MOBI Intake
Date of Enlistment: July 1962
Date of Discharge: July 1974
Ships and Establishments.: HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
City or Town: Lake Munmorah
State: NSW
Country: Australia
Occupation: Retired
Location: Mosman, NSW
Contact:
Contact Hippy Chippy

Post by Hippy Chippy »

Latest news on the Java Threat... :evil3:

:type: http://www.itechpost.com/articles/4923/ ... remain.htm" onclick="window.open(this.href);return false;

:type: http://www.thinkdigit.com/Internet/Orac ... 13056.html" onclick="window.open(this.href);return false;

:type: http://noesisstar.com/the-java-bug-thre ... -aapl-1030" onclick="window.open(this.href);return false;

Here’s what the Anti-Virus and Web Security community have said on the threat...

AVG: :type: http://www.avgthreatlabs.com/webthreats ... a-exploit/" onclick="window.open(this.href);return false;

Vipre :type: http://vipresecuritynews.com/2013/01/01 ... 6-7-and-8/" onclick="window.open(this.href);return false;

Trend Micro :type: http://fearlessweb.trendmicro.com/2013/ ... d-to-know/" onclick="window.open(this.href);return false; (posted 11th Jan. 2013)

McAfee :type: http://blogs.mcafee.com/mcafee-labs/jav ... -crimeware" onclick="window.open(this.href);return false;

F-Secure :type: http://www.f-secure.com/weblog/archives/00002285.html" onclick="window.open(this.href);return false;

Seems that the folk at Symantec (Norton’s), Avast and Kaspersky Labs are still in holiday mode, no mention of the current Java Exploit Trojan Threat on their websites...

CERT :type: http://www.kb.cert.org/vuls/id/625617" onclick="window.open(this.href);return false;

Hot for Security :type: http://www.hotforsecurity.com/blog/crit ... -4997.html" onclick="window.open(this.href);return false;

The Times of India :type: http://timesofindia.indiatimes.com/tech ... 016281.cms" onclick="window.open(this.href);return false;

Student IT :type: http://www.studentnewsie.com/java-users ... fix-15444/" onclick="window.open(this.href);return false;

IT News :type: http://www.itnews.com.au/News/328319,br ... -list.aspx" onclick="window.open(this.href);return false;

Forbes :type: http://www.itnews.com.au/News/328319,br ... -list.aspx" onclick="window.open(this.href);return false;

=; I think I've posted enough links to get the message across, I'll only post solutions or updates on when it's safe to reinstall/ enable Java from here on in... :evil3:
Image
Rick Pengilly
WEBMASTER
Ex-CPOMTH3
R42630
13th MOBI Intake
July'62 to July'74
HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
Top
User avatar
Hippy Chippy
Site Admin
Posts: 4172
Joined: Mon Oct 13, 2003 8:09 am
Given Name: Rick
Surname: Pengilly
Original Official Number: R42630
Rank and Rate: CPOMTH3
Intake or Class: 13th MOBI Intake
Date of Enlistment: July 1962
Date of Discharge: July 1974
Ships and Establishments.: HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
City or Town: Lake Munmorah
State: NSW
Country: Australia
Occupation: Retired
Location: Mosman, NSW
Contact:
Contact Hippy Chippy

Post by Hippy Chippy »

A useful, full and frank Q & A on the :type: Java Exploit Threat :evil3:
Image
Rick Pengilly
WEBMASTER
Ex-CPOMTH3
R42630
13th MOBI Intake
July'62 to July'74
HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
Top
User avatar
Hippy Chippy
Site Admin
Posts: 4172
Joined: Mon Oct 13, 2003 8:09 am
Given Name: Rick
Surname: Pengilly
Original Official Number: R42630
Rank and Rate: CPOMTH3
Intake or Class: 13th MOBI Intake
Date of Enlistment: July 1962
Date of Discharge: July 1974
Ships and Establishments.: HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
City or Town: Lake Munmorah
State: NSW
Country: Australia
Occupation: Retired
Location: Mosman, NSW
Contact:
Contact Hippy Chippy

Post by Hippy Chippy »

These articles are the latest I've found on the Java Exploit Threat: :hiding:

Dated 23rd Jan. 2013: :type: http://threatpost.com/en_us/blogs/attac ... ite-012313" onclick="window.open(this.href);return false;

Dated 28th Jan. 2013: :type: http://www.zdnet.com/java-update-doesnt ... 000010422/" onclick="window.open(this.href);return false;

And for the technically minded...

Dated 25th Jan. 2013: :type: http://www.invincea.com/2013/01/invince ... 2013-0422/" onclick="window.open(this.href);return false;

=; Suffice to say that I have not had any difficulty using Internet Explorer, Mozilla Firefox, or Google Chrome to access RAN Skilled Hands,
despite having 'disabled' Java on my PC... :-k

This article, dated 28th Jan. 2013, includes a link to a tele-conference with the Head of Oracle (Java) Security, Milton Smith... :argue:

:type: http://www.scmagazine.com/oracle-speaks ... le/277898/" onclick="window.open(this.href);return false; Not much in the way of reassurance there...! :roll:

On another related issue, I fould this article (sh!t-canning Oracle for bundling unsolicited software with Java updates,) very interesting: :evil3:

:type: http://www.zdnet.com/a-close-look-at-ho ... 000010038/" onclick="window.open(this.href);return false;
Image
Rick Pengilly
WEBMASTER
Ex-CPOMTH3
R42630
13th MOBI Intake
July'62 to July'74
HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
Top
User avatar
Hippy Chippy
Site Admin
Posts: 4172
Joined: Mon Oct 13, 2003 8:09 am
Given Name: Rick
Surname: Pengilly
Original Official Number: R42630
Rank and Rate: CPOMTH3
Intake or Class: 13th MOBI Intake
Date of Enlistment: July 1962
Date of Discharge: July 1974
Ships and Establishments.: HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
City or Town: Lake Munmorah
State: NSW
Country: Australia
Occupation: Retired
Location: Mosman, NSW
Contact:
Contact Hippy Chippy

Re: Security Threat

Post by Hippy Chippy »

ON A PERSONAL LEVEL... if you receive a Facebook 'Friend Request' :evil3: from me :gotmail: and you're already 'My Friend'... PLEASE IGNORE IT...
I've been reliably advised by a number of my :3some: Facebook friends :3some: that :angry9: I've been hacked... :swear1: :shit: :hiding:

Over recent days, I also noticed that I started getting many 'Friend Requests' :evil3: from people who were already Facebook friends, and I was assuming that they'd been hacked...
[-X Not necessarily so, the hackers were probably just using my 'Friends' List to perpetuate their hack... :bugger:

I'm also assuming that Facebook is the hackers preferred playground :puter: and that the 'hack' (apparently very common on Facebook,) is limited to Facebook itself... =;
:dontknow: Anyway, Facebook have been informed and they've told me that the 'phoney Me' :stickman: has been deleted... :yess: :woohoo: :bob light:

:prayer: Sorry for any inconvenience... :notworthy:
Image
Rick Pengilly
WEBMASTER
Ex-CPOMTH3
R42630
13th MOBI Intake
July'62 to July'74
HMAS Nirimba - HMAS Melbourne - HMAS Cerberus - HMAS Tarangau - HMAS Lonsdale - HMAS Tarangau - HMAS Nirimba - HMAS Brisbane
Top
Post Reply

Return to “Announcements from the Administrators (Check this Forum each time you log in...!)”