Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.sys.mac.apps > #9098
| From | Paul Sture <paul@sture.ch> |
|---|---|
| Subject | Re: Decent AV for Mac OS X |
| Newsgroups | comp.sys.mac.system, comp.sys.mac.apps |
| References | (2 earlier) <jll88v$8kk$1@reader1.panix.com> <1ki4xkt.m6xp7c1dcvgfpN%jamiekg@wizardling.geek.nz> <dI-dnYuJ1OPNGh3SnZ2dnUVZ_s6dnZ2d@giganews.com> <1ki87v6.rdrwbpv3rdt6N%jamiekg@wizardling.geek.nz> <1ki8a3z.1g3qfb3otloiuN%dempson@actrix.gen.nz> |
| Organization | PostgreSQL and SQLite |
| Date | 2012-04-09 08:57 +0200 |
| Message-ID | <orda59-9l7.ln1@news.sture.ch> (permalink) |
Cross-posted to 2 groups.
On Sun, 08 Apr 2012 10:34:57 +1200, David Empson wrote: > Jamie Kahn Genet <jamiekg@wizardling.geek.nz> wrote: > >> Anyway - all a Mac user need do in this situation is either run >> software update or disable Java in his web browser and other apps like >> email and RSS reader (in the unlikely event they're daft enough to >> enable Java in them in the first place - the good ones never have by >> default, and even some web browsers such as Camino don't by default). >> Running an AV app is overkill IMO. > > That will only prevent future infection. If the computer had already > acquired the Flashback trojan, something would be needed to detect and > remove it. > > Apple's Xprotect mechanism might be able to catch it, but having a look > through the current definitions, it is only looking for Flashback A, B > and C variants, not the one that exploits the Java vulnerability > (Flashback K). I suspect that at least part of this trojan cannot be > intercepted by Xprotect because it loads alongside other applications as > a dynamic library, rather than being a malicious application you run > directly. I've also seen mention that some Flashback variants disable > Xprotect. > > This appears to be a case where running a full scan with an anti-virus > is a good idea. > > The most important point is to get the Java updated installed, to block > future infection. Lion users only need to worry about this if they have > installed Java, since it is not installed by default. > > Those on Leopard and earlier systems should seriously consider disabling > Java completely (using Java Preferences), and certainly disable it in > their web browser. I'll go further and say that for Lion where Java is optional: o - If you don't need Java, then don't install it. o . If you have already installed Java, consider removing it. From February 2011: "Oracle gives 21 (new) reasons to uninstall Java Oracle this week pushed an updated version of its Java runtime environment that fixes 21 security vulnerabilities, 19 of which allow attackers to remotely install malicious software on end-user machines. ... Bootnote No, OpenOffice does not require Java. Per the official OpenOffice Wiki, Java is required merely to complete OpenOffice. Most OpenOffice functions work just fine on machines that don't have Java installed." <http://www.theregister.co.uk/2011/02/17/java_security_threat/> From the OpenOffice site: <http://wiki.services.openoffice.org/wiki/Java_and_OpenOffice.org> "Java is required for complete OpenOffice.org functionality. Java is mainly required to use the new embedded Java technology based HSQLDB database engine, or to make use of accessibility and assistive technologies. If you do not require database tables or accessibility integration or some wizards, then you do not need to download and install Java. Base (the database component) for example completely relies on Java technologies to run, but other programs (like Writer, Calc, and Impress) only need Java for special functionality (see below). " And from the LibreOffice Wiki: <https://en.wikipedia.org/wiki/Libreoffice#Initial_release> "Also underway is the reduction of Java dependency." -- Paul Sture
Back to comp.sys.mac.apps | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 18:46 -0400
Re: Decent AV for Mac OS X Jolly Roger <jollyroger@pobox.com> - 2012-04-05 15:58 -0700
Re: Decent AV for Mac OS X briang@panix.com (Brian Gordon) - 2012-04-05 23:01 +0000
Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-06 11:42 +1200
Re: Decent AV for Mac OS X Warren Oates <warren.oates@gmail.com> - 2012-04-06 08:41 -0400
Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-07 10:30 +1200
Re: Decent AV for Mac OS X Patty Winter <patty1@wintertime.com> - 2012-04-06 23:48 +0000
Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-07 12:46 +1200
Re: Decent AV for Mac OS X dempson@actrix.gen.nz (David Empson) - 2012-04-07 12:28 +1200
Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-07 11:55 +0200
Re: Decent AV for Mac OS X Jolly Roger <jollyroger@pobox.com> - 2012-04-07 08:28 -0700
Re: Decent AV for Mac OS X Patty Winter <patty1@wintertime.com> - 2012-04-07 17:09 +0000
Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-07 14:19 -0400
Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-06 14:58 +1200
Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 23:46 -0400
Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-06 00:10 -0400
Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-07 14:28 -0400
Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-08 09:46 +1200
Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-07 18:33 -0400
Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-08 12:51 +0200
Re: Decent AV for Mac OS X Ant <ant@zimage.comANT> - 2012-04-08 06:41 -0700
Re: Decent AV for Mac OS X Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-08 14:00 -0400
Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-09 08:35 +0200
Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 14:17 -0400
Re: Decent AV for Mac OS X dempson@actrix.gen.nz (David Empson) - 2012-04-08 10:34 +1200
Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-07 19:08 -0400
Re: Decent AV for Mac OS X PhillipJones <pjones1@kimbanet.com> - 2012-04-07 22:11 -0400
Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-09 08:57 +0200
Re: Decent AV for Mac OS X Michelle Steiner <michelle@michelle.org> - 2012-04-09 08:23 -0700
Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-10 09:30 +0200
Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-11 09:22 +1200
Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-11 10:03 +1200
Re: Decent AV for Mac OS X dorayme <dorayme@optusnet.com.au> - 2012-04-11 08:16 +1000
Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-11 13:18 +1200
Re: Decent AV for Mac OS X dorayme <dorayme@optusnet.com.au> - 2012-04-11 12:24 +1000
Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-08 12:45 +0200
Re: Decent AV for Mac OS X "Geoffrey S. Mendelson" <gsm@mendelson.com> - 2012-04-08 11:49 +0000
Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-09 11:36 +1200
Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 13:53 -0400
Re: Decent AV for Mac OS X Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-08 14:02 -0400
Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 14:19 -0400
Re: Decent AV for Mac OS X Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-08 14:50 -0400
Re: Decent AV for Mac OS X Steve Thompson <smt@vgersoft.com> - 2012-04-08 14:59 -0400
Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 15:18 -0400
Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-09 09:02 +0200
Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-05 19:56 -0400
Re: Decent AV for Mac OS X "Mr. Strat" <rag@nospam.techline.com> - 2012-04-06 09:58 -0700
csiph-web