SEARCH

Enter your search query in the box above ^, or use the forum search tool.

You are not logged in.

#1 2013-01-11 19:44:58

saneks
#! Die Hard
Registered: 2009-10-01
Posts: 1,020

Flash and Javascript Warning january 2013

edit: changed thread/threat title- to january 2013 tongue

Today I read on the news that some exploits for Flash and Javascript Java have been discovered, and users are advised to better disable both.

I don't know if I am safe using Linux, but apart from that, disabling both makes a pleasant difference when surfing the net. I had adblock and flashbloc before, but also some interfaces become surprisingly calm and simple without javascript and look kinda oldschool. Plus it loads faster on poor connections. Bad news can be good news. smile

Last edited by saneks (2013-01-20 07:03:09)


eee701 user & other lap/desktops

Offline

Help fund CrunchBang, donate to the project!

#2 2013-01-12 00:03:34

anonymous
The Mystery Member
Registered: 2008-11-29
Posts: 9,419

Re: Flash and Javascript Warning january 2013

I heard about an exploit for Java but not JavaScript:

http://labs.alienvault.com/labs/index.p … a-zeroday/

Do you have a link?

Offline

#3 2013-01-12 02:49:25

NewCityVegas
Resident Tech Reporter
From: ANTI-CENSORSHIP
Registered: 2008-12-02
Posts: 628
Website

Re: Flash and Javascript Warning january 2013

anonymous wrote:

I heard about an exploit for Java but not JavaScript ...

I'm sure that it is just java and not JavaScript.

Nobody is going to recommend disabling JavaScript since it is a core feature of almost all business web sites.


============= You are the dreamer - and the dream =============

gooplusplus.com (goo++) --- compact web tools and 250+ internet radio stations

Offline

#4 2013-01-12 03:25:45

gutterslob
#! Resident Bum
Registered: 2009-11-03
Posts: 3,207

Re: Flash and Javascript Warning january 2013

It's Java (not Javascript), as Anon and NCV stated. Specifically, it's Oracle's proprietary Java SE 7. It remains to be seen whether OpenJDK contains the same vulnerabilities, but considering the fact that Oracle's JRE is based on JDK, I say the risks are there as well.

No idea about the Flash vulnerability, though. Source?


Point & Squirt

Offline

#5 2013-01-12 03:31:49

anonymous
The Mystery Member
Registered: 2008-11-29
Posts: 9,419

Re: Flash and Javascript Warning january 2013

I found this for Flash:

http://www.adobe.com/support/security/b … 13-01.html

However Adobe already released an updated Flash, so you just need to grab it.

Offline

#6 2013-01-16 14:30:31

CBizgreat!
#! Die Hard
Registered: 2011-07-27
Posts: 1,865

Re: Flash and Javascript Warning january 2013

Wouldn't worry too much, the fact that java is a poss problem is older than Jebuz's diapers folks.

I wuv noscript ( plugin for all mozilla based browsers.) anyway. If only for the RAM and cpu savings ... any Security benefit is just a bonus imo, shrugs. Am sure Chrome and Opera have knockoffs of noscript. In fact have played with some of them but don't use those browsers regardless. Flash ... what else is new also ? Supposed to be a dying technology. Sooner the better me thinks. Long since wished for an end to adobe's curse ... System resource sucking pigdog from heel !!! Hopefully it gets outmoded soon.

Personally haven't seen much reason to install Java ... Jre or opensource equiv's on OS's for quite awhile myself. Not that I'm all that concerned about poss Security probs either way. Just not coming up with a compelling reason to have it enabled ... more shrugs.


Vll! smile

Last edited by CBizgreat! (2013-01-16 15:04:54)


Some common cbiz abbreviations. This will save me time and yet @ same time tell folks what the babble is supposed to mean.

Vll ! = ( Viva la gnu/Linux !)    Vl#!! = ( Viva la #! !)    Last but not least, UD ... OD ! = ( Use Debian ... or die !) tongue

Offline

#7 2013-01-20 05:50:22

shengchieh
#! Die Hard
Registered: 2009-01-07
Posts: 617

Re: Flash and Javascript Warning january 2013

Unfortunately I have to use jave for the house security camera.  So what I'm planning
is to allow jave for one browser and use it only for security.  And let the other browsers
w/ disabled java surf.  [I have 3 browsers on my laptop.]

Sheng-Chieh

Offline

#8 2013-01-20 05:54:48

anonymous
The Mystery Member
Registered: 2008-11-29
Posts: 9,419

Re: Flash and Javascript Warning january 2013

It should be alright to use after you get the recent update.

Offline

#9 2013-01-20 07:33:58

pmo
Member
From: Europe
Registered: 2013-01-08
Posts: 29
Website

Re: Flash and Javascript Warning january 2013

Firefox/Icewhesel + NoScript.. I don't know if Chromium has it yet but it's nice.. I personally disabled java on my browsers.


Catch me on irc.freenode.net @ #crunchbang - pmo

Offline

#10 2013-01-20 15:24:12

schwim
#! Die Hard
From: Interweb's #1 Devotee
Registered: 2012-10-11
Posts: 1,031
Website

Re: Flash and Javascript Warning january 2013

In IW, I run:

adblock
adblock element hiding helper
noscript
quickjava

which pretty much negates any attacks through a browser.

Last edited by schwim (2013-01-20 15:29:12)

Offline

Board footer

Powered by FluxBB

Copyright © 2012 CrunchBang Linux.
Proudly powered by Debian. Hosted by Linode.
Debian is a registered trademark of Software in the Public Interest, Inc.
Server: acrobat

Debian Logo