ForumGarden

Posted: **Sat Jan 12, 2013 1:10 pm**

It sounds like this particular fuss is about Java 7 which I haven't downloaded yet. I've still got Java 6 on my laptop and won't be in any hurry to upgrade it now.

Do you think they're just being overly cautious or will you change your settings?

US-CERT Alert TA13-010A - Oracle Java 7 Security Manager Bypass Vulnerability

U.S. tells computer users to disable Java software - CBS News

Java 7 update 10 introduces important new security controls | Naked Security

Posted: **Sat Jan 12, 2013 1:40 pm**

The latest note at Naked Security suggests that versions earlier than Java 7 are also vulnerable. Were it me, I'd disable all browser Java plug-ins immediately and just leave them off. I have absolutely no need for Java in a web browser at all, and it's quite possible that you don't either.

The Java plug-in, for those who don't know, is entirely different to Javascript.

Posted: **Sat Jan 12, 2013 4:25 pm**

The Java 6 on my computer doesn't look like the screenshots they show for Java 7 and I didn't find anything applicable under Security. It does show an option under the "Advanced" tab for "Java Plug-in". When I click on that, it allows me the option to unclick "Enable the next generation Java Plug-in". It was defaulted to enable so I just "disabled" it ... I hope that takes care of it. I appreciate the advice!