<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
Here is some technology news you can use if your computer system has
a Java installation installed:<br>
<br>
Oracle Corp. released an emergency update to its Java software for
surfing the Web on Sunday, but security experts said the update
fails to protect PCs from attack by hackers intent on committing
cyber crimes.<br>
<br>
<b><a class="moz-txt-link-freetext" href="http://tinyurl.com/ayw8wdj">http://tinyurl.com/ayw8wdj</a> </b><br>
<br>
ORACLE'S UPDATE<br>
<br>
Oracle said on its security blog on Sunday that its update fixed two
vulnerabilities in the version of Java 7 for Web browsers.<br>
<br>
It said that it also switched Java's security settings to "high" by
default, making it more difficult for suspicious programs to run on
a personal computer without the knowledge of the user.<br>
<br>
Java is a computer language that enables programmers to write
software utilizing just one set of code that will run on virtually
any type of computer, including ones that use Microsoft Corp's
Windows, Apple Inc's OS X and Linux, an operating system widely
employed by corporations.<br>
<br>
<br>
London-based Incisive Media, online publishers of the Inquirer, had
this to report on the subject:<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.theinquirer.net/inquirer/news/2236028/oracle-issues-hot-patch-for-zero-day-java-exploit">http://www.theinquirer.net/inquirer/news/2236028/oracle-issues-hot-patch-for-zero-day-java-exploit</a>
<br>
<br>
<div id="rpuCopySelection" style="text-align: left; font-size: 12px;
color: black;"><strong>ENTERPRISE VENDOR</strong> Oracle has
released a patch for the zero day Java exploit that we reported on
last week.<br>
<br>
Then the insecurity firms were advising people to load their
virtual shotguns and get in their security basements to avoid
terrible assaults. Millions of computer users, regardless of what
operating systems they use, would be affected and it would happen
when they were using the internet.<br>
<br>
<a
href="http://www.theinquirer.net/inquirer/news/2235878/security-vendors-warn-users-to-disable-java-after-zero-day-exploit-is-found"
target="_blank" title="Security vendors warn users to disable
Java after zero day exploit is found">Not disabling Java at that
time</a>, we gather, was the equivalent of kissing a black rat,
in London, during the plague. Fret no more though, as Oracle has
issued the patch we have all been waiting for and his fixed Java.<br>
<br>
<a
href="http://www.oracle.com/technetwork/java/javase/7u11-relnotes-1896856.html"
target="_blank" title="Oracle Java update">Java 7 Update 11</a>,
which is available now, is the sticking plaster that patches the
vulnerability. In short, it means that the "user is always warned
before any unsigned application is run to prevent silent
exploitation". It is recommended that you apply it.<br>
<br>
"It's nice that Oracle fixed this vulnerability so quickly," <a
href="http://krebsonsecurity.com/2013/01/oracle-ships-critical-security-update-for-java/"
target="_blank" title="Brian Krebs on security">said security
expert Brian Krebs</a>, "but I'll continue to advise readers to
junk this program altogether unless they have a specific need for
it."<br>
<br>
Krebs said that Oracle has already tried to fix the same flaw, but
failed, adding that malware writers are "constantly finding new
zero-day vulnerabilities in Java".<br>
<br>
He added that it would not surprise him if the same zero day
situation were to "repeat itself in a month or so". µ<br>
<br>
<span id="curate-us-tag"><a href="http://s.tt/1yp7x"><img
style="padding-right:3px;border:none;vertical-align:-12%;"
src="cid:part4.09040602.06030308@frontier.com" height="11"
width="12">The Inquirer</a> (<a href="http://s.tt/1yp7x">http://s.tt/1yp7x</a>)</span><br>
<br>
<br>
So, basically, the situation is as it was reported four months ago
by Information Week:<br>
<br>
Oracle needs to fix holes faster, say some security experts. Leave
Java disabled for now, because Oracle's emergency patch is
insufficient.<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.informationweek.com/security/attacks/java-still-not-safe-security-experts-say/240006876">http://www.informationweek.com/security/attacks/java-still-not-safe-security-experts-say/240006876</a>
<br>
<br>
</div>
<br>
Ken<br>
</body>
</html>