Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.apps > #8899 > unrolled thread

Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java?

Back to article view | Back to comp.sys.mac.apps

Contents

  Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? ANTant@zimage.com (Ant) - 2012-04-04 19:03 -0500
    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-04 19:54 -0700
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Malcolm <malcolm@invalid> - 2012-04-04 23:33 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-05 00:38 -0700
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? SY <205sk@accessforall.invalid> - 2012-04-05 16:35 +0200
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 12:19 -0700
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 13:40 -0700
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 13:52 -0700
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Bread <BreadWithSpam@Fractious.net> - 2012-04-11 15:22 -0700
                  Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-12 19:10 +0200
                    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Calum <com.gmail@nospam.scottishwildcat> - 2012-04-13 01:55 +0100
                      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-13 13:51 +1200
                        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? nospam <nospam@nospam.invalid> - 2012-04-12 23:52 -0400
                          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-12 21:31 -0700
                          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-13 20:02 +1200
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Warren Oates <warren.oates@gmail.com> - 2012-04-06 08:31 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? rijk <rijk@blah.invalid> - 2012-04-06 21:20 +0200
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? nospam <nospam@nospam.invalid> - 2012-04-05 00:06 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 00:24 -0700
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? nospam <nospam@nospam.invalid> - 2012-04-05 16:10 -0400
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 13:33 -0700
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 13:51 -0700
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 19:16 -0400
                  Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-06 14:48 +1200
                    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 23:21 -0400
                      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-06 18:19 +1200
                        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 14:09 +0200
                        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Howard.not@home.com (Howard) - 2012-04-09 18:17 +0100
                          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? PhillipJones <pjones1@kimbanet.com> - 2012-04-09 14:20 -0400
                            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Howard.not@home.com (Howard) - 2012-04-10 17:46 +0100
                              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-11 10:18 +0200
                                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? John McWilliams <jpmcw@comcast.net> - 2012-04-11 15:13 -0700
                    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 14:01 +0200
                      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-07 01:46 +1200
                        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Fred Moore <fmoore@gcfn.org> - 2012-04-06 12:15 -0400
                          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-09 09:11 +0200
                            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Fred Moore <fmoore@gcfn.org> - 2012-04-09 11:42 -0400
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 13:51 +0200
                  Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 09:28 -0700
                    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 21:51 +0200
                      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 16:43 -0700
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-05 21:27 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 14:19 +0200
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 09:29 -0700
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-06 12:22 -0700
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? nospam <nospam@nospam.invalid> - 2012-04-06 17:40 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Fred Moore <fmoore@gcfn.org> - 2012-04-06 12:11 -0400
    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-05 10:01 +0200
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-05 01:55 -0700
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-05 11:40 +0200
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 09:30 -0700
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Dave Allen <kneeljung@gmail.com> - 2012-04-06 19:03 -0500
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-07 12:48 +1200
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Dave Allen <kneeljung@gmail.com> - 2012-04-07 13:56 -0500
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-07 09:53 -0700
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? SY <205sk@accessforall.invalid> - 2012-04-07 19:01 +0200
                  Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-07 14:10 -0400
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-21 13:18 -0700
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Warren Oates <warren.oates@gmail.com> - 2012-04-05 08:20 -0400
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? George Kerby <ghost_topper@hotmail.com> - 2012-04-05 08:38 -0500
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Jolly Roger <jollyroger@pobox.com> - 2012-04-05 15:51 -0700
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? George Kerby <ghost_topper@hotmail.com> - 2012-04-05 18:49 -0500
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Jolly Roger <jollyroger@pobox.com> - 2012-04-05 16:54 -0700
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-08 13:38 +0200
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? J.J. O'Shea <try.not.to@but.see.sig> - 2012-04-09 14:03 -0400
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 19:10 -0400
    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? J.J. O'Shea <try.not.to@but.see.sig> - 2012-04-09 14:00 -0400
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-11 10:37 +0200
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-12 09:13 +1200

Page 3 of 4 — ← Prev page 1 2 [3] 4  Next page →

#9014

On 4/6/2012 12:51 PM PT, Paul Sture typed:

>>> I can confirm that "Java Preferences.app" is there on my 10.5.7 system.
>>
>> Thanks. I was wondering about that. I will disable it through there too
>> beside web browsers. How come you are using v10.5.7, and not v10.5.8?
>
> That was a typo.  I meant 10.5.8.

OK. :)
-- 
"The ant has made himself illustrious; Through constant industry 
industrious.; So what? Would you be calm and placid; If you were full of 
formic acid?" --Ogden Nash (The Ant)
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#8964

On 04-04-2012 22:54, Michael Vilain wrote:
> Java is deeply embedded into MacOS.  I don't know what you'd break if
> you removed it.  I suppose you could reverse engineer the patch that

Actually, in recent versions of MacOS, Java does not exist until you
try to run something that needs it.  Then it asks you if you want to 
install Java.  That doesn't sound deeply embedded to me.

What would removing it break?  Anything built in Java, including
the thing you were trying to run when it asked you to install Java.

-- 
Wes Groleau

    What kind of smiley is C:\   ?

[toc] | [prev] | [next] | [standalone]

#8985

On Thu, 05 Apr 2012 21:27:20 -0400, Wes Groleau wrote:

> On 04-04-2012 22:54, Michael Vilain wrote:
>> Java is deeply embedded into MacOS.  I don't know what you'd break if
>> you removed it.  I suppose you could reverse engineer the patch that
> 
> Actually, in recent versions of MacOS, Java does not exist until you try
> to run something that needs it.  Then it asks you if you want to install
> Java.  That doesn't sound deeply embedded to me.
> 
> What would removing it break?  Anything built in Java, including the
> thing you were trying to run when it asked you to install Java.

I think that "deeply embedded into MacOS" refers to older versions of
OS X.

I have just done a "locate -i java" on my 10.5.8 system and got a 
staggering 46,350 lines of output, but I assume that much of that will be 
because I have Xcode installed.

I have this lot in /usr/share/java

Tools			derby-10.6.1.0		junit-4.8.2
ant-1.7.1		derby-10.7.1.1		junit.jar
ant-1.8.1		derby-10.8.1.2		maven-2.2.0
ant-1.8.2		junit-4.1-src.jar	maven-2.2.1
apache-maven-2.0.9	junit-4.1.jar		maven-3.0.2
derby-10.5.1.1		junit-4.6		maven-3.0.3
pbook:java graham$ ls Tools/
Applet Launcher.app	Jar Bundler.app		Java VisualVM.app
pbook:java graham$ ls derby-10.8.1.2/
KEYS			RELEASE-NOTES.html	lib
LICENSE			bin
NOTICE			index.html


I think that rather than trying to identify what to zap, I'll settle for 
disabling Java in my browsers and in Java Preferences.app.

-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#8995

On 4/6/2012 5:19 AM PT, Paul Sture typed:

> I think that rather than trying to identify what to zap, I'll settle for
> disabling Java in my browsers and in Java Preferences.app.

Good idea. I will be doing this too. :)

I want to know why the heck did Apple have to supply Java in the older 
Mac OS X? I wished there was a way to replace it with a third party or 
something that doesn't have these vulnerabilities and still use Java if 
needed. :(
-- 
"Ants die in sugar." --Malawi
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#9007

In article <S9ydnSJh3qF3hOLSnZ2dnUVZ_vGdnZ2d@earthlink.com>,
 Ant <ant@zimage.comANT> wrote:

> On 4/6/2012 5:19 AM PT, Paul Sture typed:
> 
> > I think that rather than trying to identify what to zap, I'll settle for
> > disabling Java in my browsers and in Java Preferences.app.
> 
> Good idea. I will be doing this too. :)
> 
> I want to know why the heck did Apple have to supply Java in the older 
> Mac OS X? I wished there was a way to replace it with a third party or 
> something that doesn't have these vulnerabilities and still use Java if 
> needed. :(

Many companies wanted to write applications for MacOS and their primary 
development environment was Java.  GeneSpring, a gene expression 
analysis program, had developers that bugged Apple weekly because 
biologists don't like Windows and wanted their product on MacOS.  It's 
also why Apple took over development of the Apple features from Sun.  
That product is toast now, thanks to Agilent buying the company and 
killing the product buy outsourcing the next release to India.

The joke amongst Java developers at the time was 'write once, debug 
everywhere'.  Don't know if that's still true.  Or what the owners of 
the dead Agilent product will do (big Pharm plus various universities).  

I don't know who else used Java to develop a commercial product on 
MacOS, but it was there for a reason.  The only reason it's not now is 
because licensing got sticky.  Either Oracle wanted real money for it or 
GPL V3 got implemented (which is why Apple supplies their own buggy 
compiler rather than gcc).

-- 
DeeDee, don't press that button!  DeeDee!  NO!  Dee...
[I filter all Goggle Groups posts, so any reply may be automatically ignored]

[toc] | [prev] | [next] | [standalone]

#9010

In article <vilain-8F1079.12224106042012@news.individual.net>, Michael
Vilain <vilain@NOspamcop.net> wrote:

> I don't know who else used Java to develop a commercial product on 
> MacOS, but it was there for a reason. 

crashplan and an image processing app whose name i can't remember were
written in java. there were a few other apps too. 

> The only reason it's not now is 
> because licensing got sticky.  Either Oracle wanted real money for it or 
> GPL V3 got implemented (which is why Apple supplies their own buggy 
> compiler rather than gcc).

if you mean clang/llvm, that's worlds better than gcc.

[toc] | [prev] | [next] | [standalone]

#8991

In article <jllgpo$830$1@dont-email.me>,
 Wes Groleau <Groleau+news@FreeShell.org> wrote:

> What kind of smiley is C:\   ?

Disgruntled Elvis?

[toc] | [prev] | [next] | [standalone]

#8910

On Wed, 04 Apr 2012 19:03:30 -0500, Ant wrote:

> Hello.
> 
> I read the recent Flashback trojan with Apple's Java. I have a client
> who is still running Mac OS X 10.5.8 and noticed Apple released an
> updated Java for Mac OS X 10.6. I assume there is none for unsupported
> 10.5.8. Is there a way to remove its Java or protect it without
> upgrading the OS?
> 

There are some manual removal instructions here:

<http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml>

To summarize, if both these Terminal commands give the "does not exist" 
error, you don't have this particular nasty (at least in its current 
form):

defaults read /Applications/Safari.app/Contents/Info LSEnvironment 
defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES 

Sample output:

pbook:~paul$ defaults read /Applications/Safari.app/Contents/Info 
LSEnvironment 
2012-04-05 09:57:39.890 defaults[16703:10b] 
The domain/default pair of (/Applications/Safari.app/Contents/Info, 
LSEnvironment) does not exist

pbook:~paul$ defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES 
2012-04-05 09:59:10.954 defaults[16710:10b] 
The domain/default pair of (/Users/paul/.MacOSX/environment, 
DYLD_INSERT_LIBRARIES) does not exist


-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#8911

On 4/5/2012 1:01 AM PT, Paul Sture typed:

>> I read the recent Flashback trojan with Apple's Java. I have a client
>> who is still running Mac OS X 10.5.8 and noticed Apple released an
>> updated Java for Mac OS X 10.6. I assume there is none for unsupported
>> 10.5.8. Is there a way to remove its Java or protect it without
>> upgrading the OS?
>
> There are some manual removal instructions here:
>
> <http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml>
>
> To summarize, if both these Terminal commands give the "does not exist"
> error, you don't have this particular nasty (at least in its current
> form):
>
> defaults read /Applications/Safari.app/Contents/Info LSEnvironment
> defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
>
> Sample output:
>
> pbook:~paul$ defaults read /Applications/Safari.app/Contents/Info
> LSEnvironment
> 2012-04-05 09:57:39.890 defaults[16703:10b]
> The domain/default pair of (/Applications/Safari.app/Contents/Info,
> LSEnvironment) does not exist
>
> pbook:~paul$ defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
> 2012-04-05 09:59:10.954 defaults[16710:10b]
> The domain/default pair of (/Users/paul/.MacOSX/environment,
> DYLD_INSERT_LIBRARIES) does not exist

Thanks. I will have to check to see if my client's old, updated Mac OS X 
10.5.8 is infected or not. Then, disabled his Java. :(
-- 
"Be thine enemy an ant, see in him an elephant." --Turkish Proverb
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#8912

On Thu, 05 Apr 2012 01:55:20 -0700, Ant wrote:

> On 4/5/2012 1:01 AM PT, Paul Sture typed:
> 
>>> I read the recent Flashback trojan with Apple's Java. I have a client
>>> who is still running Mac OS X 10.5.8 and noticed Apple released an
>>> updated Java for Mac OS X 10.6. I assume there is none for unsupported
>>> 10.5.8. Is there a way to remove its Java or protect it without
>>> upgrading the OS?
>>
>> There are some manual removal instructions here:
>>
>> <http://www.f-secure.com/v-descs/trojan-
downloader_osx_flashback_i.shtml>
>>
>> To summarize, if both these Terminal commands give the "does not exist"
>> error, you don't have this particular nasty (at least in its current
>> form):
>>
>> defaults read /Applications/Safari.app/Contents/Info LSEnvironment
>> defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
>>
>> Sample output:
>>
>> pbook:~paul$ defaults read /Applications/Safari.app/Contents/Info
>> LSEnvironment
>> 2012-04-05 09:57:39.890 defaults[16703:10b] The domain/default pair of
>> (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist
>>
>> pbook:~paul$ defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
>> 2012-04-05 09:59:10.954 defaults[16710:10b] The domain/default pair of
>> (/Users/paul/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist
> 
> Thanks. I will have to check to see if my client's old, updated Mac OS X
> 10.5.8 is infected or not. Then, disabled his Java. :(

Thanks, I forgot to mention disabling Java.  I have disabled it in my 
browsers as well.



-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#8996

On 4/5/2012 2:40 AM PT, Paul Sture typed:

>> Thanks. I will have to check to see if my client's old, updated Mac OS X
>> 10.5.8 is infected or not. Then, disabled his Java. :(
>
> Thanks, I forgot to mention disabling Java.  I have disabled it in my
> browsers as well.

Don't forget to disable it through Utilities' Java Preference!
-- 
"I got worms! That's what we're going to call it. We're going to 
specialize in selling worm farms. You know like ant farms. What's the 
matter, a little tense about the flight?" --Lloyd Christmas (Dumb and 
Dumber movie)
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#9017

In article <S9ydnV1h3qG7h-LSnZ2dnUVZ_vGdnZ2d@earthlink.com>,
 Ant <ant@zimage.comANT> wrote:

> On 4/5/2012 2:40 AM PT, Paul Sture typed:
> 
> > Thanks, I forgot to mention disabling Java.  I have disabled it in my
> > browsers as well.
> 
> Don't forget to disable it through Utilities' Java Preference!

Okay, I've opened Java Preferences from Utilities,but I have no idea 
what i need to do with it to disable Java.  Do I simply uncheck all of 
the boxes under the General tab?  [Mac OS 10.5.8]
-- 
Dave

[toc] | [prev] | [next] | [standalone]

#9021

Dave Allen <kneeljung@gmail.com> wrote:

> In article <S9ydnV1h3qG7h-LSnZ2dnUVZ_vGdnZ2d@earthlink.com>,
>  Ant <ant@zimage.comANT> wrote:
> 
> > On 4/5/2012 2:40 AM PT, Paul Sture typed:
> > 
> > > Thanks, I forgot to mention disabling Java.  I have disabled it in my
> > > browsers as well.
> > 
> > Don't forget to disable it through Utilities' Java Preference!
> 
> Okay, I've opened Java Preferences from Utilities,but I have no idea 
> what i need to do with it to disable Java.  Do I simply uncheck all of
> the boxes under the General tab?  [Mac OS 10.5.8]

Yes.

The various boxes in the On column control different versions of the
Java virtual machine. It might be useful to selectively enable them if
you had a Java app which needed a specific version of Java and did't
work with later versions, or it had a problem with 32-bit vs 64-bit.

Looks like the default under 10.5 on an Intel machine is for J2SE 5.0
(32-bit and 64-bit) and 64-bit Java SE 6 to be enabled, but not J2SE
1.4.2. If I remember right, 64-bit Java only exists on Intel.

(J2SE = "Java 2 Standard Edition", by the way.)

-- 
David Empson
dempson@actrix.gen.nz

[toc] | [prev] | [next] | [standalone]

#9053

In article <1ki6lku.rot36c5eqzkiN%dempson@actrix.gen.nz>,
 dempson@actrix.gen.nz (David Empson) wrote:

> Dave Allen <kneeljung@gmail.com> wrote:
> 
> > Okay, I've opened Java Preferences from Utilities,but I have no idea 
> > what i need to do with it to disable Java.  Do I simply uncheck all of
> > the boxes under the General tab?  [Mac OS 10.5.8]
> 
> Yes.
> 
> The various boxes in the On column control different versions of the
> Java virtual machine. It might be useful to selectively enable them if
> you had a Java app which needed a specific version of Java and did't
> work with later versions, or it had a problem with 32-bit vs 64-bit.
> 
> Looks like the default under 10.5 on an Intel machine is for J2SE 5.0
> (32-bit and 64-bit) and 64-bit Java SE 6 to be enabled, but not J2SE
> 1.4.2. If I remember right, 64-bit Java only exists on Intel.
> 
> (J2SE = "Java 2 Standard Edition", by the way.)

Thanks, David. That takes care of the one machine I have that's not 
running Lion. It was probably the least likely one to be affected anyway 
since it's a five year old MacBook that I keep in reserve and only use 
when the new MacBook Pro isn't available.
-- 
Dave

[toc] | [prev] | [next] | [standalone]

#9035

On 4/6/2012 5:03 PM PT, Dave Allen typed:

>>> Thanks, I forgot to mention disabling Java.  I have disabled it in my
>>> browsers as well.
>>
>> Don't forget to disable it through Utilities' Java Preference!
>
> Okay, I've opened Java Preferences from Utilities,but I have no idea
> what i need to do with it to disable Java.  Do I simply uncheck all of
> the boxes under the General tab?  [Mac OS 10.5.8]

That is what I did in there beside disabling Java in web browsers. Then, 
you can go to http://javatester.org/, http://java.com, or any trusted 
web site with Java applets to see if Java is disabled.
-- 
"Each of us needs to withdraw from the cares which will not withdraw 
from us. We need hours of aimless wandering or spates of time sitting on 
park benches, observing the mysterious world of ants and the canopy of 
treetops." --Maya Angelou (b. 1928) American writer and entertainer
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#9037

In article <a8udnVrXcJVo7R3SnZ2dnUVZ_t6dnZ2d@earthlink.com>,
 Ant <ant@zimage.comANT> wrote:

> On 4/6/2012 5:03 PM PT, Dave Allen typed:
> 
> >>> Thanks, I forgot to mention disabling Java.  I have disabled it in my
> >>> browsers as well.
> >>
> >> Don't forget to disable it through Utilities' Java Preference!
> >
> > Okay, I've opened Java Preferences from Utilities,but I have no idea
> > what i need to do with it to disable Java.  Do I simply uncheck all of
> > the boxes under the General tab?  [Mac OS 10.5.8]
> 
> That is what I did in there beside disabling Java in web browsers. Then, 
> you can go to http://javatester.org/, http://java.com, or any trusted 
> web site with Java applets to see if Java is disabled.

Or try: http://browserspy.dk/java.php
SK.

[toc] | [prev] | [next] | [standalone]

#9049

On 2012-04-07 13:01 , SY wrote:
> In article<a8udnVrXcJVo7R3SnZ2dnUVZ_t6dnZ2d@earthlink.com>,
>   Ant<ant@zimage.comANT>  wrote:
>
>> On 4/6/2012 5:03 PM PT, Dave Allen typed:
>>
>>>>> Thanks, I forgot to mention disabling Java.  I have disabled it in my
>>>>> browsers as well.
>>>>
>>>> Don't forget to disable it through Utilities' Java Preference!
>>>
>>> Okay, I've opened Java Preferences from Utilities,but I have no idea
>>> what i need to do with it to disable Java.  Do I simply uncheck all of
>>> the boxes under the General tab?  [Mac OS 10.5.8]
>>
>> That is what I did in there beside disabling Java in web browsers. Then,
>> you can go to http://javatester.org/, http://java.com, or any trusted
>> web site with Java applets to see if Java is disabled.
>
> Or try: http://browserspy.dk/java.php
> SK.

Or don't.  The one's that Ant supplied are fine.

-- 
"I was gratified to be able to answer promptly, and I did.
  I said I didn't know."
                           -Samuel Clemens.

[toc] | [prev] | [next] | [standalone]

#9397

On 4/7/2012 9:53 AM PT, Ant typed:

>>>> Thanks, I forgot to mention disabling Java. I have disabled it in my
>>>> browsers as well.
>>>
>>> Don't forget to disable it through Utilities' Java Preference!
>>
>> Okay, I've opened Java Preferences from Utilities,but I have no idea
>> what i need to do with it to disable Java. Do I simply uncheck all of
>> the boxes under the General tab? [Mac OS 10.5.8]
>
> That is what I did in there beside disabling Java in web browsers. Then,
> you can go to http://javatester.org/, http://java.com, or any trusted
> web site with Java applets to see if Java is disabled.

I don't know if this is a glitch on this old specific MacBook Pro (15"; 
2008) or an actual bug on all Mac OS X 10.5.8 machines. Disabling Java 
plugins in Mac OS X 10.5.8's Utilities' Java Preferences will remove ALL 
installed plug-ins in Safari. Why? I DON'T KNOW! [gets slimed] It would 
be nice if someone else, with this OS version, to try it and see if it 
happens there.

For now, I will have Java disabled on both Firefox and Safari web browsers.
-- 
"At length, when they came to a (lowly) valley of ants, one of the ants 
said: 'O ye ants, get into your habitations, lest Solomon and his hosts 
crush you (under foot) without knowing it.'" --Surah 27. The Ant, The 
Ants, line 18
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#8916

In article <m30059-u5g.ln1@news.sture.ch>, Paul Sture <paul@sture.ch> 
wrote:

> To summarize, if both these Terminal commands give the "does not exist" 
> error, you don't have this particular nasty (at least in its current 
> form):
> 
> defaults read /Applications/Safari.app/Contents/Info LSEnvironment 
> defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES 

Thanks Paul -- that's valuable info.
-- 

... do not cover a warm kettle or your stock may sour. -- Julia Child

[toc] | [prev] | [next] | [standalone]

#8919

On 4/5/12 3:01 AM, in article m30059-u5g.ln1@news.sture.ch, "Paul Sture"
<paul@sture.ch> wrote:

> On Wed, 04 Apr 2012 19:03:30 -0500, Ant wrote:
> 
>> Hello.
>> 
>> I read the recent Flashback trojan with Apple's Java. I have a client
>> who is still running Mac OS X 10.5.8 and noticed Apple released an
>> updated Java for Mac OS X 10.6. I assume there is none for unsupported
>> 10.5.8. Is there a way to remove its Java or protect it without
>> upgrading the OS?
>> 
> 
> There are some manual removal instructions here:
> 
> <http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml>
> 
> To summarize, if both these Terminal commands give the "does not exist"
> error, you don't have this particular nasty (at least in its current
> form):
> 

Gizmodo confirms that:

<http://gizmodo.com/5899352/mac-flashback-trojan-find-out-if-youre-one-of-th
e-600000-infected>

[toc] | [prev] | [next] | [standalone]

Page 3 of 4 — ← Prev page 1 2 [3] 4  Next page →

Back to top | Article view | comp.sys.mac.apps

csiph-web