Date:26/12/11
A security expert has warned users to uninstall Oracle's Java SE platform from their machines, as the software creates too many exploitable vulnerabilities.
Writing on his blog, Mikko Hypponen, chief research officer at security firm F-Secure, explained that users should ditch the software unless they absolutely need it.
He added that because of these vulnerabilities users need to be sure they are operating the latest version of the software, or be vulnerable to hackers.
"The risks of Java are nicely illustrated by the recent Java Rhino vulnerability. "If you're running Java, but not the latest version, you're vulnerable. So either you have to be certain you are running the latest version of Java – or get rid of it altogether."
Hypponen advised users to leave Java on their machines if they feel that they need it for a specific web application, or online banking, but to remove the plugin from their preferred browser.
He recommended that users leave the Java plug-in installed on one browser, which then can be used for this application only, to reduce the risks of using a vulnerable browser for everything.
He concluded that Google's Chrome browser is effective at securing potentially vulnerable browser plug-ins.
"Chrome has been doing a good job in sandboxing or otherwise securing risky add-ons and extensions. Many Java exploits do not work against Chrome."A recent Microsoft security report found that Java code is the most common target for hackers.
Security researcher recommends ditching Oracle Java platform
A security expert has warned users to uninstall Oracle's Java SE platform from their machines, as the software creates too many exploitable vulnerabilities.Writing on his blog, Mikko Hypponen, chief research officer at security firm F-Secure, explained that users should ditch the software unless they absolutely need it.
He added that because of these vulnerabilities users need to be sure they are operating the latest version of the software, or be vulnerable to hackers.
"The risks of Java are nicely illustrated by the recent Java Rhino vulnerability. "If you're running Java, but not the latest version, you're vulnerable. So either you have to be certain you are running the latest version of Java – or get rid of it altogether."
Hypponen advised users to leave Java on their machines if they feel that they need it for a specific web application, or online banking, but to remove the plugin from their preferred browser.
He recommended that users leave the Java plug-in installed on one browser, which then can be used for this application only, to reduce the risks of using a vulnerable browser for everything.
He concluded that Google's Chrome browser is effective at securing potentially vulnerable browser plug-ins.
"Chrome has been doing a good job in sandboxing or otherwise securing risky add-ons and extensions. Many Java exploits do not work against Chrome."A recent Microsoft security report found that Java code is the most common target for hackers.
Views: 988
©ictnews.az. All rights reserved.
Similar news
- Cellphone Use May Raise Cancer Risk
- Australian police pushes cyber safety education
- Vietnam aims to lead in e-government
- Senate Website Gets Hacked
- US builds net for cyber war games
- Japan enacts anti-computer virus law
- India passes law vs e-waste
- Anonymous Declares War On The City Of Orlando
- Microsoft highlights evolving dangers as online identity data proliferates
- Consumers want internet security to be provided by banks
- Government facilities targets of cyber attack
- South Korean web attacks might been war drill
- Sri Lanka to Establish National Passport Database to Increase Border Security
- Hi-tech crime agencies set to employ information security professionals
- Phone hacking and online campaign bring down the News of the World
