SRL Archive - General

There is now a major Java exploit that allows any website to run a Java applet without asking for permission, this can lead to several things, including a JDB.

What does JDB stand for?

Java Drive-By

What is a JDB do?

http://en.wikipedia.org/wiki/Drive-by_download

So why doesn't Java protect against this?

Normally you have to allow the applet to run, this exploit allows the applet to run without showing the permission form.

http://villavu.com/forum/showthread.php?t=95108

This post by Jakee explains what allows the Silent JDB's

How do I protect myself?

Disable Java 7.

Step by step guide to disabling Java 7.

1) Open the control panel.


2)Click on programs (Not uninstall, the bolder green word).


3)Click on java.


4)Go to the tab at the top of the applet named Java.


5)Click on view.


6)Uncheck the top box on the right side that corresponds with Java 7.


7)Click okay.


8) You must click apply for the settings to take effect.



You are now protected :spot:

From: SRLKing

You are now protected :spot:

Unless you have already been hit :(

Nice guide, hope everyone disables 7.x :)

Nice guide but do you know if this disables java 7 plugins in a browser?

From: Justin
Unless you have already been hit :(


Nice guide, hope everyone disables 7.x :)

I know /;

From: weequ
Nice guide but do you know if this disables java 7 plugins in a browser?

It should :P It should be disabled all together.

Just simply disable it on the web browser you always use..
example Google Chrome:
on the address bar: chrome://plugins/
simply disable: java

Done

If you need java for a specific website, enable it again.. this doesn't require restarting google chrome - it happens automatically.

From: blinkblink
Just simply disable it on the web browser you always use..
example Google Chrome:
on the address bar: chrome://plugins/
simply disable: java

Done



If you need java for a specific website, enable it again.. this doesn't require restarting google chrome - it happens automatically.

This disables it all together, but allows for older stable versions to still run in the browser.

Going to the Security tab, you can disable Java content in browsers (via the check box) as well as set your slider to Very high (which should prompt every signed/unsigned java data before usage/interacting).
Disclaimer - Of course there are many other effective, primitive possibilities to use too.

Let me know if I need to add anything!