{"id":27,"date":"2013-01-16T23:09:50","date_gmt":"2013-01-16T23:09:50","guid":{"rendered":"http:\/\/www.xvudrive.com\/blog\/?p=27"},"modified":"2013-01-25T14:54:26","modified_gmt":"2013-01-25T14:54:26","slug":"java-update-is-close-but-no-cigar","status":"publish","type":"post","link":"https:\/\/www.xvudrive.com\/blog\/java-update-is-close-but-no-cigar\/","title":{"rendered":"Java update is close, but no cigar"},"content":{"rendered":"<p>Wow, just, wow.  As we previously opined, Java has indeed already been exploited again a mere 1 day after releasing a patch to fix the last 0-day threat.<\/p>\n<p><a href=\"http:\/\/arstechnica.com\/security\/2013\/01\/5000-will-buy-you-access-to-another-new-critical-java-vulnerability\/\">This threat can be purchased for a mere $5,000 on the internet<\/a>, a paltry sum considering the amount of money people make on botnets, spamming, extortion, and the rest of the nefarious practices this security flaw could result in.<\/p>\n<p>Trend Micro, a well known anti-virus vendor <a href=\"http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/java-fix-for-zero-day-stirs-questions\/\">commented today on the flawed patch<\/a>, and referenced their previous post &#8220;<a href=\"http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/how-to-use-java-if-you-must\/\">How to Use Java \u2013 If You Must<\/a>&#8221; on safe ways to use Java when required, but not all the time. <\/p>\n<p>For the vast majority of users, disabling Java would have minimal impact.  For the rest of the users, we agree with Trend&#8217;s suggestions:<\/p>\n<blockquote><p>For users who cannot avoid using Java, there are other ways to mitigate its risks:<\/p>\n<p>    1. If you have Java installed because an application needs it, opt to disable Java in your browser(s)<br \/>\n    2. Disable Java on a per-browser basis. Pick a \u201csecondary\u201d browser to use for sites that use Java and disable it in your preferred browser<\/p><\/blockquote>\n<p>This seems like good advise, however there is a third option.  Use an XVU Drive when accessing secure sites and prevent any infection at all from affecting your browsing.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wow, just, wow. As we previously opined, Java has indeed already been exploited again a mere 1 day after releasing a patch to fix the last 0-day threat. This threat can be purchased for a mere $5,000 on the internet, &hellip; <a href=\"https:\/\/www.xvudrive.com\/blog\/java-update-is-close-but-no-cigar\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-27","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/posts\/27","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/comments?post=27"}],"version-history":[{"count":3,"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/posts\/27\/revisions"}],"predecessor-version":[{"id":35,"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/posts\/27\/revisions\/35"}],"wp:attachment":[{"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/media?parent=27"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/categories?post=27"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xvudrive.com\/blog\/wp-json\/wp\/v2\/tags?post=27"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}