What to make of this latest Quicktime/Java security flaw announcement?
Here's the link:
MacFixIt
Secunia: "The vulnerability is caused due to an unspecified error within the Java handling in QuickTime. This can be exploited to execute arbitrary code when a user visits a malicious web site using a Java-enabled browser e.g. Safari or Fire fox."
MacFixIt: "It appears that the flaw is triggered by simply accessing a malicious Web page--no further user action is required."
I followed the instructions for Safari and quickly found some financial web sites unusable.
For now I'm ignoring it but have backed up to my two bootable clone drives, one internal and the other external.
What do people do with these vulnerability alerts arising from what I suppose fall under the "proof of concept" variety. Do nothing and wait until something happens?
Raymon
G4 933 MHz "2002 Quicksilver", 1.54 GB RAM, two 160 GB HD, Mac OS X (10.4.9) 120 GB FireLite FW drive, iLife'06, LaCie d2 burner, 80 GB iPod
Stanley,
Thank you for your reply. I've since set up "User B", a non-Admin. account. Some questions:
1. I have the Pictures and Music folders in the Shared user folder. I'm assuming any changes to these folders will take place only in these folders and not in their original counterparts in the Admin. account which I'm told I can delete later?
2. I copied the Admin. user Library folder for User B. However, I still can't run my Netscape browser and email client applications while logged in User B without giving read/write privileges for the Admin User Library folder to User B. I haven't tried just assigning access to the Netscape Mozilla folder.
For improved security I've denied access to the other Admin user folders.
Taking a tip from Pogue's Missing Manual, Tiger Edition, I've clicked off the "Restart-Sleep-Shut Down" buttons in the login window.
On the other hand, I've selected showing only the login passwords for each User in the login window. So no need to type in the user name. I've also since chosen better passwords.
I've backed up to a bootable clone in an external Firewire drive.
Any comments and advice would be much appreciated.
~Raymon
Similar Messages
-
What's up with this update re: Java? Do I have it? If not, do I need to get it and from where?
What's up with this update re: Java?
Do I have it?
If not, do I need to get it and from where?
ThanksYou don't have it unless you have downloaded and installed it either manually or via Software Update.
The update should be installed to protect you from possible malware exploits via Java. However, if you don't use Java programming or run Java applets in your browser, then you do not need the update. But you must turn Java off in your browser's security preferences (it will be a checkbox.) -
When I clicked on the recent Apple Security Software Update, it took 15-20 minutes to install, and another 15 minutes or more to restart. Then everything was amazingly slow, as if nothing was happening... spinning gears, spinning color wheels. The background universe image took forever to load. Desktop took a long time to load. Then Mail and Safari took a long time to load. What has happened? Was this update legit? I'm thinking it was the legitimate listed 7-2-2013 update for 10.6.8, but in my 15 years of Apple loyalty, I've never experienced an update that bogged my system down like this.
Not enough free space on the startup disk can cause the issues you are referring to.
Control click the MacintoshHD icon on your desktop then click Get Info.
You'll see: Capacity & Available
Make sure there's at least 15% free disk space.
If it's not a disk space issue, verify the disk for errors.
Launch Disk Utility located in HD > Applications > Utilities
Select the startup disk on the left then select the First Aid tab.
Click: Verify Disk (not Verify Disk Permissions)
If Disk Utility reports problems, you will need to insert your install disc to make repairs.
And if you have not done so lately, backup all your important data just in case. -
Lately I've been receiving requests to update a "plug-in". This is a new message, and I can't get to my usual web sites without upgrading a "plug-in". A list of "plug-ins" is then displayed that require updating. How secure is this update page? Should I log in to your Mozilla web site to insure security? I don't want to be a victim of "phishing".
Thank you,
Dave Hatchhttps://www.mozilla.org/en-US/plugincheck/ will show you a complete list of the plugins you need to update (and you have alot)
-
Okay, so it's not really vindication as I only really hate Java because I have special DNA that sends an auto-destruct command to my brain cells on programming Java for too long, but anyway: it's not just awful - it's now a prime-target for phisers, as seen on slashdot, as well!
I've removed JRE for the time being. It's a good job I don't intend on using Open Office for a while. I suppose it's better to just remove the firefox/opera plugin for it. It would be even easier to unclick the "enable Java" box. But there's a certain pleasure in removing it. It's almost like I've suddenly killed whoever designed Java's I/O system. Blissful.
Beware - here be dragons!While I see the gravity of that issue, I still don't see why this justifies a rant against Java. Malware can be written easily in C, C++, VB, C#, Assembler, you name it! It's not the language which sucks (which in fact does not), it is the people that use the language to do evil things. Of course this is rather evil, what people might do with Java. But so are worms and trojans. Do we say that the Languages they are written in are evil just because they give Criminals the opportunity to do what they do? No we do not! Therefore, the original post is pure flamebait or, at least, more of a rant than anything else.
-
Java.security.AccessControlException: No READ permission
I got this a lot after the deployment. Is there a way to correct this?
Thanks,
java.security.AccessControlException: No READ permission for key: "weblogic.diagnostics.DiagnosticContext"
at weblogic.workarea.WorkContextLocalMap.get(WorkContextLocalMap.java:61)
at weblogic.workarea.WorkContextMapImpl.get(WorkContextMapImpl.java:66)
at weblogic.diagnostics.context.DiagnosticContextFactory.findOrCreateDiagnosticContext(DiagnosticContextFactory.java
at weblogic.diagnostics.context.DiagnosticContextFactory.findOrCreateDiagnosticContext(DiagnosticContextFactory.java
at weblogic.diagnostics.context.DiagnosticContextHelper.getContextId(DiagnosticContextHelper.java:32)
at weblogic.logging.LogEntryInitializer.getCurrentDiagnosticContextId(LogEntryInitializer.java:104)
at weblogic.logging.LogEntryInitializer.initializeLogEntry(LogEntryInitializer.java:61)
at weblogic.logging.WLLogger.log(WLLogger.java:38)
at weblogic.logging.j2ee.ServletContextLogger.log(ServletContextLogger.java:84)
at weblogic.servlet.internal.WebAppServletContext.log(WebAppServletContext.java:798)
at org.springframework.web.servlet.FrameworkServlet.initWebApplicationContext(FrameworkServlet.java:251)
at org.springframework.web.servlet.FrameworkServlet.initServletBean(FrameworkServlet.java:222)
at org.springframework.web.servlet.HttpServletBean.init(HttpServletBean.java:117)
at javax.servlet.GenericServlet.init(GenericServlet.java:256)
at weblogic.servlet.internal.StubSecurityHelper$ServletInitAction.run(StubSecurityHelper.java:276)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.StubSecurityHelper.createServlet(StubSecurityHelper.java:68)
at weblogic.servlet.internal.StubLifecycleHelper.createOneInstance(StubLifecycleHelper.java:58)
at weblogic.servlet.internal.StubLifecycleHelper.<init>(StubLifecycleHelper.java:48)
at weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.java:504)
at weblogic.servlet.internal.WebAppServletContext.preloadServlet(WebAppServletContext.java:1698)
at weblogic.servlet.internal.WebAppServletContext.loadServletsOnStartup(WebAppServletContext.java:1675)
at weblogic.servlet.internal.WebAppServletContext.preloadResources(WebAppServletContext.java:1595)
at weblogic.servlet.internal.WebAppServletContext.start(WebAppServletContext.java:2734)
at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:892)
at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:336)
at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:204)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:26)
at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:60)
at weblogic.application.internal.flow.ScopedModuleDriver.start(ScopedModuleDriver.java:200)
at weblogic.application.internal.flow.ModuleListenerInvoker.start(ModuleListenerInvoker.java:117)
at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:204)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:26)
at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:60)
at weblogic.application.internal.flow.StartModulesFlow.activate(StartModulesFlow.java:26)
at weblogic.application.internal.BaseDeployment$2.next(BaseDeployment.java:641)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:26)
at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:229)
at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:154)
at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:80)
at weblogic.deploy.internal.targetserver.BasicDeployment.activate(BasicDeployment.java:181)
at weblogic.deploy.internal.targetserver.BasicDeployment.activateFromServerLifecycle(BasicDeployment.java:352)
at weblogic.management.deploy.internal.DeploymentAdapter$1.doActivate(DeploymentAdapter.java:52)
at weblogic.management.deploy.internal.DeploymentAdapter.activate(DeploymentAdapter.java:186)
at weblogic.management.deploy.internal.AppTransition$2.transitionApp(AppTransition.java:30)
at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:233)
at weblogic.management.deploy.internal.ConfiguredDeployments.activate(ConfiguredDeployments.java:169)
at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:123)
at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:173)
at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:89)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:67)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:183)
at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:894)
at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:336)
at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:204)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:26)
at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:60)
Truncated. see log file for complete stacktrace
java.security.AccessControlException: No READ permission for key: "weblogic.diagnostics.DiagnosticContext"
at weblogic.workarea.WorkContextLocalMap.get(WorkContextLocalMap.java:61)I am having similar issue with, when trying to get anything from JNDI.
Here is the error and I upgraded wls 8.1 to wls 9.2.
Thanks.
<2007-11-02 09:39:44,269> [ERROR] - Error retrieving system parameters (ViewpointProperties.java:<init>:496)
java.security.AccessControlException: No READ permission for key: "weblogic.app.internal.AdminMode"
at weblogic.workarea.WorkContextLocalMap.get(WorkContextLocalMap.java:61)
at weblogic.workarea.WorkContextMapImpl.get(WorkContextMapImpl.java:66)
at weblogic.application.utils.ApplicationVersionUtils.getCurrentAdminMode(ApplicationVersionUtils.java:469)
at weblogic.application.utils.ApplicationVersionUtils.isAdminModeRequest(ApplicationVersionUtils.java:485)
at weblogic.jndi.internal.AdminModeHandler.checkLookup(AdminModeHandler.java:103)
at weblogic.jndi.internal.ServerNamingNode.lookupHere(ServerNamingNode.java:170)
at weblogic.jndi.internal.BasicNamingNode.lookup(BasicNamingNode.java:206)
at weblogic.jndi.internal.WLEventContextImpl.lookup(WLEventContextImpl.java:269)
at weblogic.jndi.internal.WLContextImpl.lookup(WLContextImpl.java:362)
at javax.naming.InitialContext.lookup(InitialContext.java:351) -
What's the go with this latest update. Half my apps don't work and the iPad runs slower? How do I go back to the old operating system?
Make sure your apps are updated. You might try Settings > iTunes & App Store > Automatic Downloads - Updates = "On".
You cannot go back to an old operating system. -
w/ this latest version, getting MANY "the connection was reset" pages, plus VERY VERY VERY slow loading. I'm running Windows 7 on a new Dell. What is up w/ that?
I don't know how else to phrase that. I'm a pretty good user, but after defragging, backing up, and getting rid of a bunch of files that "may" slow down performance of firefox, the fact is, "the connection was reset" comes up five or six times a day--AND the browser is going slow as molasses. I haven't had this much trouble since before I got my new dell.hello whatagem123, it is never a good idea to stick with outdated versions of firefox just for the sake of addons, as this will put the integrity of your system and your the personal data on it at risk - there are various [https://www.mozilla.org/security/known-vulnerabilities/firefox.html known security vulnerabilities (some of them highly critical)] that were fixed in later versions!
so please [[Update Firefox to the latest version]] & [https://www.mozilla.org/en-US/plugincheck/ update your plugins] (your java plugin has security vulnerabilities that are actively and widely exploited on the web).
afterwards i'd recommend resetting firefox - this will keep your bookmarks and passwords but will get rid of most other customizations. this might well fix both the issues you've described in your question...
[[Reset Firefox – easily fix most problems]] -
When i update to the latest version (7.0.3), there is a message appear to me when i open any application that contains notification such as (What'sApp or BBM) , this message said (Connect to iTunes to use push Notification) , How I can to stop these messages that appear to me constantly?
Hi,
One of my ex-colleagues has installed a NI-DAQ 6.5 in our system. [And I do not see any other naitional instruments card in the CPU of the computer, may be he removed it] I deleted the account and all his files in the system. When I am trying to install version8.0, its not getting installed and giving me a message that I should uninstall the previous version by going to Add/Remove programs in the control panel.
I tried doing that, but the "Change/Remove" button does not seem to work...[There is no response and so unable to install the new version...]
Any idea how can this problem be solved?
It is a windowsXP operating system with SP2 installed on a machine with P4 processor.
Thanks -
When I open iTunes, it will not allow me to preview or download TV shows. The preview and download options are gray and will not let me view them. I have tried installing the latest Quicktime but it tells me that I have to do software update and when I do, Quicktime does not appear to need an update. I have no idea what to do
Click on your preference and check the Parental tab for possible restrictions. Open iTunes, then click the iTunes menu, select preferences after the window opens click on the Parental icon, take a look at the content restrictions section.
-
i just updated my latest java but the update is causing problems with some external devices. So i would like to uninstall this latest java update and get back the previous one. That should solve to problems with my external device.
Is this possible and how do i do that?
Anyone who responds thanks for that!
Juko
I am running
Hardware Overview:
Model Name: Mac Pro
Model Identifier: MacPro1,1
Processor Name: Dual-Core Intel Xeon
Processor Speed: 2,66 GHz
Number of Processors: 2
Total Number of Cores: 4
L2 Cache (per Processor): 4 MB
Memory: 6 GB
Bus Speed: 1,33 GHz
Boot ROM Version: MP11.005D.B00
SMC Version (system): 1.7f10
Serial Number (system): CK7XXXXXXGP
Hardware UUID: 00000000-0000-1000-8000-0017F20F82F0
System Software Overview:
System Version: Mac OS X 10.7.5 (11G63)
Kernel Version: Darwin 11.4.2
Boot Volume: Macintosh HD(2)
Boot Mode: Normal
Computer Name: Mac Pro van Juko de Vries
User Name: Juko de Vries (jukodevries)
Secure Virtual Memory: Enabled
64-bit Kernel and Extensions: No
Time since boot: 11 days 20:39
Message was edited by HostJava 6 you can't as Apple maintains it, and Java 7 you could if you uninstall it and Oracle provides the earlier version which they likely won't his last update fixed 37 remote exploits.
Java broken some software here and there, all you'll have to do is wait for a update from the other parties. -
I'm trying to download the latest version of iTunes and get the message "There is a problem with this Windows Installer package. A program required for this install to complete could not be run." I have no clue what to do with this to resolve the issue. Thanks for any help!
Repair your Apple software update.
Go to START > ALL PROGRAMS > Apple Software Update. If it offers you a newer version of Apple Software Update, do it but Deselect any other software offered at the same time. Once done, try another iTunes install
If you don't find ASU, go to Control Panel:
START > CONTROL PANEL/ > Add n Remove Programs, highlight ASU and click CHANGE then REPAIR -
My computer has been spontaneously restarting itself. This last time I wasn't even at the keyboard, I was across the room. I don't know what to make of it, completely baffled. I'd love some help on this, and if it could come in layman's terms I'd love it even more.
Hi ...
Try Troubleshooting the MagSafe adapter
If the Mac freezes, it may be a preference setting.
Check System Preferences > Energy Saver
See if Restart automatically if the computer freezes is selected. If it is, deselect that box. -
After downloading the latest iTunes update, when I open Outlook on my pc, I am getting an error message that MobileMe has encountered a problem and needs to close. What's up with this?
You're welcome.
tt2 -
What is wrong in this java code?
Can someone please tell me what is wrong in this java code?
/* The program is intended to start animating text at the click of a button, pause it at another click and resume at the next click. It should continue like this */
import javax.swing.*;
import java.util.*;
import java.awt.*;
import java.awt.event.*;
public class TextAnime implements Runnable
JFrame frame;
boolean flag;
Thread animeThread;
JLabel label;
String[] textArray;
public TextAnime()
flag = false;
animeThread = new Thread(this);
frame = new JFrame("Animate Text");
GridBagLayout gbl = new GridBagLayout();
GridBagConstraints gbc = new GridBagConstraints();
frame.setLayout(gbl);
JButton button = new JButton("Start");
label = new JLabel("Stopped");
textArray = new String[5];
String textArray1[] = {"Programmer", "SportsMan", "Genius", "Friend", "Knowledgable"};
for(int ctr = 0; ctr<5 ; ctr++)
textArray[ctr] = textArray1[ctr];
gbc.weightx = 1;
gbc.gridx = 0;
gbl.setConstraints(button,gbc);
frame.getContentPane().add(button);
ButList bl = new ButList();
button.addActionListener(bl);
gbc.gridx = 1;
gbl.setConstraints(label,gbc);
frame.getContentPane().add(label);
frame.setSize(200,150);
frame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOS E);
frame.setVisible(true);
public class ButList implements ActionListener
public void actionPerformed(ActionEvent evt)
if(flag == false)
flag = true;
animeStart();
else
flag = false;
//animeStop();
public synchronized void animeStart()
animeThread.start();
Thread newThread;
newThread = Thread.currentThread();
newThread.notify();
public void animeStop()
animeThread.interrupt();
public void run()
int i = 0;
try
while(i == i)
if(i==5)
i=0;
label.setText(textArray);
animeThread.sleep(1000);
i++;
if (flag == false)
animeThread.wait();
catch(InterruptedException ie)
label.setText("Stopped");
public static void main(String args[])
TextAnime ta = new TextAnime();
Please tell me if this can be written in a more simpler manner. Also please correct this code. I am tired after trying many times.When I fix your error, compile and run it, I get this exception:
Exception in thread "AWT-EventQueue-0" java.lang.IllegalMonitorStateException
at java.lang.Object.notify(Native Method)
at cruft.TextAnime.animeStart(TextAnime.java:81)
at cruft.TextAnime$ButList.actionPerformed(TextAnime.java:63)
at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1995)
at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2318)
at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:387)
at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:242)
at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:236)
at java.awt.Component.processMouseEvent(Component.java:6038)
at javax.swing.JComponent.processMouseEvent(JComponent.java:3260)
at java.awt.Component.processEvent(Component.java:5803)
at java.awt.Container.processEvent(Container.java:2058)
at java.awt.Component.dispatchEventImpl(Component.java:4410)
at java.awt.Container.dispatchEventImpl(Container.java:2116)
at java.awt.Component.dispatchEvent(Component.java:4240)
at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4322)
at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3986)
at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3916)
at java.awt.Container.dispatchEventImpl(Container.java:2102)
at java.awt.Window.dispatchEventImpl(Window.java:2429)
at java.awt.Component.dispatchEvent(Component.java:4240)
at java.awt.EventQueue.dispatchEvent(EventQueue.java:599)
at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:273)
at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:183)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:173)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:168)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:160)
at java.awt.EventDispatchThread.run(EventDispatchThread.java:121)
%
Maybe you are looking for
-
Fields in the Task List -- Operation Overview
Dear Expert, There are few fields in the operation Overview of the Task List - >> if we move ahead in each n evry operation -- fields like Material Grp, Cost element and Assembly....n lot more. plz tell me the appropriate use of the same.(If any) plz
-
We been watching Netflix on our Mini for several years. Gradually, the DVD drive has become pickier & pickier. We have to wash the discs and sometimes even blow air into the disk slot to get a DVD to play. It's getting worser and worser. I think
-
N73 v3.0704.1.0.1 vs v4.0726.2.0.1
Comparing the last firmware released (v4.0726.2.0.1) with a older one (v3.0704.1.0.1), these are proven to be the main Pros & Cons: Pros: - The Music Player from N73 ME - New RealPlayer version - New Quickoffice version - "Search" app with plugins -
-
Somehow, my mother managed to break the plastic off of the speaker connection on her iMac. The Pro Speakers will no longer work through that port. I talked to Apple on the phone and they told me that it's covered under AppleCare if they determine it
-
Hi, I recently went through the bad experience of Itunes 5. Currently I am back to Itunes 4.9 and everything is great, except for one thing. When I insert a music CD, store bought, Itunes cannot locate title information for it. Regardless of the cd t