SRL Archive - FAQ

Best Java ?


illuminatiswag

2012-06-07 22:29:40

Whats the best Java 6 update to use 29 30 or 31 ? or any other suggestions

Gushers

2012-06-07 22:31:52

I always stay up-to-date with my Java.

illuminatiswag

2012-06-07 22:32:45

From: Gushers
I always stay up-to-date with my Java.


You using the Java 7s and its working good for you ?

YoHoJo

2012-06-07 22:32:58

No java is the best…?
The latest one is 'best' I guess?

If you're wondeing about SMART, it's just not written for/optimized for java 7, so java 6 is the 'best java' to have to run SMART properly.

Neros

2012-06-07 22:33:24

well as far as i know 31 has increased protection against drive-by's and shit, id go for 31, been using it since release

illuminatiswag

2012-06-07 22:35:19

From: YoHoJo
No java is the best…?
The latest one is 'best' I guess?

If you're wondeing about SMART, it's just not written for/optimized for java 7, so java 6 is the 'best java' to have to run SMART properly.


Yea i mean best Java to work with Simba/S.M.A.R.T

YoHoJo

2012-06-07 22:38:10

I doubt that…..
All Java apps that run in your browser first have a popup asking you if you wish to run the java applet. Only allow trusted ones, and you're safe from
Drivebys….

Why would a later version be less safe.


Common sense please.

Gushers

2012-06-07 22:38:51

I have Java 7 downloaded right now and it's working for me BUT BUT BUT I ran into some major problems using it and it took me a while to try fix it. So personally I would just use Java 6 31, stay with version 6 but stay as updated as you can with version 6. Trust me, I got mad at myself for downloading Java 7 because I had to fix things.

illuminatiswag

2012-06-07 22:53:38

Thanks you guys ill stick with J6U31

Silentcore

2012-06-07 23:10:13

From: Gushers
I have Java 7 downloaded right now and it's working for me BUT BUT BUT I ran into some major problems using it and it took me a while to try fix it. So personally I would just use Java 6 31, stay with version 6 but stay as updated as you can with version 6. Trust me, I got mad at myself for downloading Java 7 because I had to fix things.


May I ask what you had to fix?

Neros

2012-06-07 23:39:31

From: YoHoJo
I doubt that…..
All Java apps that run in your browser first have a popup asking you if you wish to run the java applet. Only allow trusted ones, and you're safe from
Drivebys….

Why would a later version be less safe.


Common sense please.


please refer to the documentation on the oracle site before saying im wrong, i am infact right. so uhm yeah.

Gushers

2012-06-08 00:31:49

From: Ucantseemebot
May I ask what you had to fix?


I got a whole bunch of errors and I ended up with the "msvcr71.dll error" and than I couldn't run Simba.
But now I'm running Simba with Java 7 :D

grats

2012-06-08 01:37:31

been using java7 since it came out all the way through its "shitty stages" never really had any problems..

YoHoJo

2012-06-08 01:41:05

@Neros show me?
And still Microsoft releases tiny security fixes for all kinds of stuff all the time on windows updates. They are rare random little loopholes every program has tons of. A java driveby is a driveby and as long as you never allow any untruseted java applets to run you should be all good.
But sorry to doubt you, link to the info?

@Gushers just get java 6 lates update and refer to the FAQ for any problems for best results.

Neros

2012-06-08 03:45:50

From: YoHoJo
@Neros show me?
And still Microsoft releases tiny security fixes for all kinds of stuff all the time on windows updates. They are rare random little loopholes every program has tons of. A java driveby is a driveby and as long as you never allow any untruseted java applets to run you should be all good.
But sorry to doubt you, link to the info?

@Gushers just get java 6 lates update and refer to the FAQ for any problems for best results.


uhm we have one link here covering some security patch notes from soon after the driveby's first started appearing and shit (even though it's 2010 it's relevant):

http://www.oracle.com/technetwork/topics/security/alert-cve-2010-0886-094541.html

heres the critical patch released in February this year ( read the notes on this too)

http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html

meh then i also googled "Security Alert CVE-2010-0886"

and returned this: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0886

turns out i was wrong at first and it's actually 6u10-19 CVE-2010 affects…

but yeah there we have it, im guessing java driveby's are exactly the same idea as SQL exploits cept you have to confirm the remote access,correct me if im wrong but if it can be exploited it can be patched.

at first the driveby's did not need authentication to run, then after the patch the driveby's written to exploit said exploit had to ask for authentication like any other java applet, it doesn't matter who's applet you click yes to, your allowing them to upload files to your computer, a driveby was designed to bypass the authentication stages.

(idk if that sounds how it should but i've been on the double dutch, so meh)

Chen Monopoly

2012-06-08 17:14:08

Java 7 has new syntax stuff such as switch on strings and binary literals, so there may be actual coding restrictions when distributing code since not everyone updates from 6 to 7.