Remember that big zero-day Java vulnerability the everyone was all worried about? Well, Oracle fixed it. Oh wait, no. That latest Java fix still has a big ol’ hole. It’s time to abandon ship, folks.
Turns out that Oracle’s original out-of-band update to Java only fixed one of the two nasty problems, and one vulnerability is still too many. The new update has given birth to two flaws that—when combined with the vulnerability Oracle missed—form another working exploit, leaving Java just as dangerous as it was before.
Java could still be fixed, but with problems popping out of the woodwork at these kinds of speeds, you’ll be hard-pressed to stay up to date on Java’s vulnerability at any given moment. It’s super easy to shut it off in your browser and stay safe that way, so you probably ought to just do that. You probably won’t even miss it. [threatpost]
Image by Levent Konuk/Shutterstock













Oracle Loses Google/Java API Copyright Case, Android Bandwagon Free to Roll on
Oracle Ordered to Pay Google's Costs in Latest Legal Humiliation
Java Patched, New Java Security Holes Discovered
Man. Oracle really has been going downhill lately hasn’t it. What’s going on?
Yes, switch to SQL Server, hurry!
Been using that since Day 1.
“You probably won’t even miss it.”
I disagree. I use it every other day.
What for? I can’t think of any websites that still use java.
One example would keepvid.com
Unfortunately my bank uses Java as the login page :/
Seeing as banks usually want to be as secure as possible, that doesn’t seem like the best idea…
Surely then could try SQL Server 2012, a better platform than Oracle and hadoop compatible!
I found Java the easiest way to get myself into learning how to program.
Java is fine its the Java web plug-in which is the problem.
I’m never touching javascripts or jvc or jquery again, RIGHT PAIN! Almost jumped off the cliff trying to compile
And again, we should be http://occupyflash.org/
No.
Yes, why should we be forced to use plugins when HTML can do the same stuff.
Pepsi is an alternative to coke. Should will kill off one of them?
Should you be forced to drink through a straw when you could drink fine and more easily without?
Why should we have to use less secure, less compatible, (often) slower and (often) more resource hungry plugins when the same things could be done in html without them?
Don’t get me wrong, there are times when it does make the most sense to use Flash or Java. The problem is that they are often used when it makes more sense not to use them.
Well put, I don’t believe that flash should be removed entirely (as the first comment suggests) however I do think it should be used more selectively.