Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #23317 > unrolled thread

Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java?

Back to article view | Back to comp.sys.mac.system

Contents

  Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? ANTant@zimage.com (Ant) - 2012-04-04 19:03 -0500
    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-04 19:54 -0700
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? nospam <nospam@nospam.invalid> - 2012-04-05 00:06 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 00:24 -0700
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? nospam <nospam@nospam.invalid> - 2012-04-05 16:10 -0400
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 13:33 -0700
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-05 13:51 -0700
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 19:16 -0400
                  Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-06 14:48 +1200
                    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 23:21 -0400
                      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-06 18:19 +1200
                        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 14:09 +0200
                        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Howard.not@home.com (Howard) - 2012-04-09 18:17 +0100
                          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? PhillipJones <pjones1@kimbanet.com> - 2012-04-09 14:20 -0400
                            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Howard.not@home.com (Howard) - 2012-04-10 17:46 +0100
                              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-11 10:18 +0200
                                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? John McWilliams <jpmcw@comcast.net> - 2012-04-11 15:13 -0700
                    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 14:01 +0200
                      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-07 01:46 +1200
                        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Fred Moore <fmoore@gcfn.org> - 2012-04-06 12:15 -0400
                          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-09 09:11 +0200
                            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Fred Moore <fmoore@gcfn.org> - 2012-04-09 11:42 -0400
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 13:51 +0200
                  Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 09:28 -0700
                    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 21:51 +0200
                      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 16:43 -0700
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-05 21:27 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-06 14:19 +0200
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 09:29 -0700
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Michael Vilain <vilain@NOspamcop.net> - 2012-04-06 12:22 -0700
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? nospam <nospam@nospam.invalid> - 2012-04-06 17:40 -0400
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Fred Moore <fmoore@gcfn.org> - 2012-04-06 12:11 -0400
    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-05 10:01 +0200
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-05 01:55 -0700
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-05 11:40 +0200
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-06 09:30 -0700
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Dave Allen <kneeljung@gmail.com> - 2012-04-06 19:03 -0500
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? dempson@actrix.gen.nz (David Empson) - 2012-04-07 12:48 +1200
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Dave Allen <kneeljung@gmail.com> - 2012-04-07 13:56 -0500
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-07 09:53 -0700
                Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? SY <205sk@accessforall.invalid> - 2012-04-07 19:01 +0200
                  Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-07 14:10 -0400
              Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Ant <ant@zimage.comANT> - 2012-04-21 13:18 -0700
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Warren Oates <warren.oates@gmail.com> - 2012-04-05 08:20 -0400
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? George Kerby <ghost_topper@hotmail.com> - 2012-04-05 08:38 -0500
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Jolly Roger <jollyroger@pobox.com> - 2012-04-05 15:51 -0700
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? George Kerby <ghost_topper@hotmail.com> - 2012-04-05 18:49 -0500
            Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Jolly Roger <jollyroger@pobox.com> - 2012-04-05 16:54 -0700
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-08 13:38 +0200
          Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? J.J. O'Shea <try.not.to@but.see.sig> - 2012-04-09 14:03 -0400
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 19:10 -0400
    Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? J.J. O'Shea <try.not.to@but.see.sig> - 2012-04-09 14:00 -0400
      Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? Paul Sture <paul@sture.ch> - 2012-04-11 10:37 +0200
        Re: Is there a Flashback protection/fix for Mac OS X 10.5.8's vulnerable Java? HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-12 09:13 +1200

Page 2 of 3 — ← Prev page 1 [2] 3  Next page →

#23536

On Fri, 06 Apr 2012 12:15:02 -0400, Fred Moore wrote:

> In article <1ki5r1s.1279kqfodfcp2N%dempson@actrix.gen.nz>,
>  dempson@actrix.gen.nz (David Empson) wrote:
> 
>> Paul Sture <paul@sture.ch> wrote:
>> 
>> > On Fri, 06 Apr 2012 14:48:32 +1200, David Empson wrote:
>> > 
>> > > Safari and other browsers won't be able to run any Java code
>> > > (unless one of them happens to include its own private copy of
>> > > Java, but I'm not aware of any which do this).
>> > 
>> > Private copies are indeed a possibility.  During the run up to Y2K
>> > our PC guys did a thorough analysis of what was running on our PCs,
>> > and many software packages at that time did install their own private
>> > copies.
>> > 
>> > Hopefully that practice has died out now, but it is still possible.
>> 
>> Less likely on a Mac at present, since Mac OS X builds of Java 6 (1.6)
>> and earlier were major customization jobs from Apple. A standard build
>> of Java might work on Mac OS X with limited functionality but I expect
>> some major components of Java wouldn't be functional without tying into
>> Apple's customizations.
>> 
>> It could become more of an issue in future when Mac support gets
>> integrated into the mainstream release of Java 7, as it will then be
>> possible for third parties to do their own Mac builds of Java.
>> 
>> > IIRC OpenOffice used to install a JRE (Java Runtime Environment).
>> > 
>> > LibreOffice doesn't install a JRE, but at least the Windows and Linux
>> > versions suggest that you download it separately from Oracle.  I
>> > haven't tried installing LibreOffice on a Mac.
>> 
>> The internal structure of LibreOffice 3.4.3, OpenOffice 3.1.0 and
>> NeoOffice 3.0.1 look very similar, including a bunch of .jar files.
>> From a quick glance I can't see anything which might be a JVM but I
>> don't know exactly what to look for.
>> 
>> > If you don't have Java installed LibreOffice (on Windows & Linux)
>> > will throw up 7 prompts warning you that Java isn't installed on the
>> > first run, but you can safely ignore these unless you want to use the
>> > Database package.
> 
> From what I have read about OOo and its offshoots NeoO and LO, they do
> not 'run' Java. They 'access several Java libraries'. Now this may be a
> distinction without a difference. I'm certainly not qualified to say.

You are probably correct.  Here's the official statement from OpenOffice:

"Java and OpenOffice.org

Java is required for complete OpenOffice.org functionality. Java is 
mainly required to use the new embedded Java technology based HSQLDB 
database engine, or to make use of accessibility and assistive 
technologies. If you do not require database tables or accessibility 
integration or some wizards, then you do not need to download and install 
Java. Base (the database component) for example completely relies on Java 
technologies to run, but other programs (like Writer, Calc, and Impress) 
only need Java for special functionality (see below). "

<http://wiki.services.openoffice.org/wiki/Java_and_OpenOffice.org>



-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#23546

In article <smea59-9l7.ln1@news.sture.ch>, Paul Sture <paul@sture.ch> 
wrote:

> On Fri, 06 Apr 2012 12:15:02 -0400, Fred Moore wrote:
> > 
> > From what I have read about OOo and its offshoots NeoO and LO, they do
> > not 'run' Java. They 'access several Java libraries'. Now this may be a
> > distinction without a difference. I'm certainly not qualified to say.
> 
> You are probably correct.  Here's the official statement from OpenOffice:
> 
> "Java and OpenOffice.org
> 
> Java is required for complete OpenOffice.org functionality. Java is 
> mainly required to use the new embedded Java technology based HSQLDB 
> database engine, or to make use of accessibility and assistive 
> technologies. If you do not require database tables or accessibility 
> integration or some wizards, then you do not need to download and install 
> Java. Base (the database component) for example completely relies on Java 
> technologies to run, but other programs (like Writer, Calc, and Impress) 
> only need Java for special functionality (see below). "
> 
> <http://wiki.services.openoffice.org/wiki/Java_and_OpenOffice.org>

Thank you for posting this, Paul! I was about to go diving for this info 
and you saved me the trouble. Just what I was looking for.

[toc] | [prev] | [next] | [standalone]

#23365

On Thu, 05 Apr 2012 13:51:44 -0700, Michael Vilain wrote:

> But you won't be able to patch the Java on the 10.5.8 system.  If you
> have /Applications/Utilities/Java Preferences, you can disable the JVM
> runtimes.

I can confirm that "Java Preferences.app" is there on my 10.5.7 system.

I also had a load of files going as far back as 1998 in the Java cache. I 
deleted those too.

-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#23377

On 4/6/2012 4:51 AM PT, Paul Sture typed:

>> But you won't be able to patch the Java on the 10.5.8 system.  If you
>> have /Applications/Utilities/Java Preferences, you can disable the JVM
>> runtimes.
>
> I can confirm that "Java Preferences.app" is there on my 10.5.7 system.

Thanks. I was wondering about that. I will disable it through there too 
beside web browsers. How come you are using v10.5.7, and not v10.5.8?
-- 
"Whoops, there goes another ambulance ant." --Seymour and Pepe (Rick 
Moranis episode from The Muppets)
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#23386

On Fri, 06 Apr 2012 09:28:03 -0700, Ant wrote:

> On 4/6/2012 4:51 AM PT, Paul Sture typed:
> 
>>> But you won't be able to patch the Java on the 10.5.8 system.  If you
>>> have /Applications/Utilities/Java Preferences, you can disable the JVM
>>> runtimes.
>>
>> I can confirm that "Java Preferences.app" is there on my 10.5.7 system.
> 
> Thanks. I was wondering about that. I will disable it through there too
> beside web browsers. How come you are using v10.5.7, and not v10.5.8?

That was a typo.  I meant 10.5.8.



-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#23392

On 4/6/2012 12:51 PM PT, Paul Sture typed:

>>> I can confirm that "Java Preferences.app" is there on my 10.5.7 system.
>>
>> Thanks. I was wondering about that. I will disable it through there too
>> beside web browsers. How come you are using v10.5.7, and not v10.5.8?
>
> That was a typo.  I meant 10.5.8.

OK. :)
-- 
"The ant has made himself illustrious; Through constant industry 
industrious.; So what? Would you be calm and placid; If you were full of 
formic acid?" --Ogden Nash (The Ant)
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#23354

On 04-04-2012 22:54, Michael Vilain wrote:
> Java is deeply embedded into MacOS.  I don't know what you'd break if
> you removed it.  I suppose you could reverse engineer the patch that

Actually, in recent versions of MacOS, Java does not exist until you
try to run something that needs it.  Then it asks you if you want to 
install Java.  That doesn't sound deeply embedded to me.

What would removing it break?  Anything built in Java, including
the thing you were trying to run when it asked you to install Java.

-- 
Wes Groleau

    What kind of smiley is C:\   ?

[toc] | [prev] | [next] | [standalone]

#23369

On Thu, 05 Apr 2012 21:27:20 -0400, Wes Groleau wrote:

> On 04-04-2012 22:54, Michael Vilain wrote:
>> Java is deeply embedded into MacOS.  I don't know what you'd break if
>> you removed it.  I suppose you could reverse engineer the patch that
> 
> Actually, in recent versions of MacOS, Java does not exist until you try
> to run something that needs it.  Then it asks you if you want to install
> Java.  That doesn't sound deeply embedded to me.
> 
> What would removing it break?  Anything built in Java, including the
> thing you were trying to run when it asked you to install Java.

I think that "deeply embedded into MacOS" refers to older versions of
OS X.

I have just done a "locate -i java" on my 10.5.8 system and got a 
staggering 46,350 lines of output, but I assume that much of that will be 
because I have Xcode installed.

I have this lot in /usr/share/java

Tools			derby-10.6.1.0		junit-4.8.2
ant-1.7.1		derby-10.7.1.1		junit.jar
ant-1.8.1		derby-10.8.1.2		maven-2.2.0
ant-1.8.2		junit-4.1-src.jar	maven-2.2.1
apache-maven-2.0.9	junit-4.1.jar		maven-3.0.2
derby-10.5.1.1		junit-4.6		maven-3.0.3
pbook:java graham$ ls Tools/
Applet Launcher.app	Jar Bundler.app		Java VisualVM.app
pbook:java graham$ ls derby-10.8.1.2/
KEYS			RELEASE-NOTES.html	lib
LICENSE			bin
NOTICE			index.html


I think that rather than trying to identify what to zap, I'll settle for 
disabling Java in my browsers and in Java Preferences.app.

-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#23378

On 4/6/2012 5:19 AM PT, Paul Sture typed:

> I think that rather than trying to identify what to zap, I'll settle for
> disabling Java in my browsers and in Java Preferences.app.

Good idea. I will be doing this too. :)

I want to know why the heck did Apple have to supply Java in the older 
Mac OS X? I wished there was a way to replace it with a third party or 
something that doesn't have these vulnerabilities and still use Java if 
needed. :(
-- 
"Ants die in sugar." --Malawi
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#23382

In article <S9ydnSJh3qF3hOLSnZ2dnUVZ_vGdnZ2d@earthlink.com>,
 Ant <ant@zimage.comANT> wrote:

> On 4/6/2012 5:19 AM PT, Paul Sture typed:
> 
> > I think that rather than trying to identify what to zap, I'll settle for
> > disabling Java in my browsers and in Java Preferences.app.
> 
> Good idea. I will be doing this too. :)
> 
> I want to know why the heck did Apple have to supply Java in the older 
> Mac OS X? I wished there was a way to replace it with a third party or 
> something that doesn't have these vulnerabilities and still use Java if 
> needed. :(

Many companies wanted to write applications for MacOS and their primary 
development environment was Java.  GeneSpring, a gene expression 
analysis program, had developers that bugged Apple weekly because 
biologists don't like Windows and wanted their product on MacOS.  It's 
also why Apple took over development of the Apple features from Sun.  
That product is toast now, thanks to Agilent buying the company and 
killing the product buy outsourcing the next release to India.

The joke amongst Java developers at the time was 'write once, debug 
everywhere'.  Don't know if that's still true.  Or what the owners of 
the dead Agilent product will do (big Pharm plus various universities).  

I don't know who else used Java to develop a commercial product on 
MacOS, but it was there for a reason.  The only reason it's not now is 
because licensing got sticky.  Either Oracle wanted real money for it or 
GPL V3 got implemented (which is why Apple supplies their own buggy 
compiler rather than gcc).

-- 
DeeDee, don't press that button!  DeeDee!  NO!  Dee...
[I filter all Goggle Groups posts, so any reply may be automatically ignored]

[toc] | [prev] | [next] | [standalone]

#23389

In article <vilain-8F1079.12224106042012@news.individual.net>, Michael
Vilain <vilain@NOspamcop.net> wrote:

> I don't know who else used Java to develop a commercial product on 
> MacOS, but it was there for a reason. 

crashplan and an image processing app whose name i can't remember were
written in java. there were a few other apps too. 

> The only reason it's not now is 
> because licensing got sticky.  Either Oracle wanted real money for it or 
> GPL V3 got implemented (which is why Apple supplies their own buggy 
> compiler rather than gcc).

if you mean clang/llvm, that's worlds better than gcc.

[toc] | [prev] | [next] | [standalone]

#23375

In article <jllgpo$830$1@dont-email.me>,
 Wes Groleau <Groleau+news@FreeShell.org> wrote:

> What kind of smiley is C:\   ?

Disgruntled Elvis?

[toc] | [prev] | [next] | [standalone]

#23324

On Wed, 04 Apr 2012 19:03:30 -0500, Ant wrote:

> Hello.
> 
> I read the recent Flashback trojan with Apple's Java. I have a client
> who is still running Mac OS X 10.5.8 and noticed Apple released an
> updated Java for Mac OS X 10.6. I assume there is none for unsupported
> 10.5.8. Is there a way to remove its Java or protect it without
> upgrading the OS?
> 

There are some manual removal instructions here:

<http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml>

To summarize, if both these Terminal commands give the "does not exist" 
error, you don't have this particular nasty (at least in its current 
form):

defaults read /Applications/Safari.app/Contents/Info LSEnvironment 
defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES 

Sample output:

pbook:~paul$ defaults read /Applications/Safari.app/Contents/Info 
LSEnvironment 
2012-04-05 09:57:39.890 defaults[16703:10b] 
The domain/default pair of (/Applications/Safari.app/Contents/Info, 
LSEnvironment) does not exist

pbook:~paul$ defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES 
2012-04-05 09:59:10.954 defaults[16710:10b] 
The domain/default pair of (/Users/paul/.MacOSX/environment, 
DYLD_INSERT_LIBRARIES) does not exist


-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#23325

On 4/5/2012 1:01 AM PT, Paul Sture typed:

>> I read the recent Flashback trojan with Apple's Java. I have a client
>> who is still running Mac OS X 10.5.8 and noticed Apple released an
>> updated Java for Mac OS X 10.6. I assume there is none for unsupported
>> 10.5.8. Is there a way to remove its Java or protect it without
>> upgrading the OS?
>
> There are some manual removal instructions here:
>
> <http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml>
>
> To summarize, if both these Terminal commands give the "does not exist"
> error, you don't have this particular nasty (at least in its current
> form):
>
> defaults read /Applications/Safari.app/Contents/Info LSEnvironment
> defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
>
> Sample output:
>
> pbook:~paul$ defaults read /Applications/Safari.app/Contents/Info
> LSEnvironment
> 2012-04-05 09:57:39.890 defaults[16703:10b]
> The domain/default pair of (/Applications/Safari.app/Contents/Info,
> LSEnvironment) does not exist
>
> pbook:~paul$ defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
> 2012-04-05 09:59:10.954 defaults[16710:10b]
> The domain/default pair of (/Users/paul/.MacOSX/environment,
> DYLD_INSERT_LIBRARIES) does not exist

Thanks. I will have to check to see if my client's old, updated Mac OS X 
10.5.8 is infected or not. Then, disabled his Java. :(
-- 
"Be thine enemy an ant, see in him an elephant." --Turkish Proverb
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#23327

On Thu, 05 Apr 2012 01:55:20 -0700, Ant wrote:

> On 4/5/2012 1:01 AM PT, Paul Sture typed:
> 
>>> I read the recent Flashback trojan with Apple's Java. I have a client
>>> who is still running Mac OS X 10.5.8 and noticed Apple released an
>>> updated Java for Mac OS X 10.6. I assume there is none for unsupported
>>> 10.5.8. Is there a way to remove its Java or protect it without
>>> upgrading the OS?
>>
>> There are some manual removal instructions here:
>>
>> <http://www.f-secure.com/v-descs/trojan-
downloader_osx_flashback_i.shtml>
>>
>> To summarize, if both these Terminal commands give the "does not exist"
>> error, you don't have this particular nasty (at least in its current
>> form):
>>
>> defaults read /Applications/Safari.app/Contents/Info LSEnvironment
>> defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
>>
>> Sample output:
>>
>> pbook:~paul$ defaults read /Applications/Safari.app/Contents/Info
>> LSEnvironment
>> 2012-04-05 09:57:39.890 defaults[16703:10b] The domain/default pair of
>> (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist
>>
>> pbook:~paul$ defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
>> 2012-04-05 09:59:10.954 defaults[16710:10b] The domain/default pair of
>> (/Users/paul/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist
> 
> Thanks. I will have to check to see if my client's old, updated Mac OS X
> 10.5.8 is infected or not. Then, disabled his Java. :(

Thanks, I forgot to mention disabling Java.  I have disabled it in my 
browsers as well.



-- 
Paul Sture

[toc] | [prev] | [next] | [standalone]

#23379

On 4/5/2012 2:40 AM PT, Paul Sture typed:

>> Thanks. I will have to check to see if my client's old, updated Mac OS X
>> 10.5.8 is infected or not. Then, disabled his Java. :(
>
> Thanks, I forgot to mention disabling Java.  I have disabled it in my
> browsers as well.

Don't forget to disable it through Utilities' Java Preference!
-- 
"I got worms! That's what we're going to call it. We're going to 
specialize in selling worm farms. You know like ant farms. What's the 
matter, a little tense about the flight?" --Lloyd Christmas (Dumb and 
Dumber movie)
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#23394

In article <S9ydnV1h3qG7h-LSnZ2dnUVZ_vGdnZ2d@earthlink.com>,
 Ant <ant@zimage.comANT> wrote:

> On 4/5/2012 2:40 AM PT, Paul Sture typed:
> 
> > Thanks, I forgot to mention disabling Java.  I have disabled it in my
> > browsers as well.
> 
> Don't forget to disable it through Utilities' Java Preference!

Okay, I've opened Java Preferences from Utilities,but I have no idea 
what i need to do with it to disable Java.  Do I simply uncheck all of 
the boxes under the General tab?  [Mac OS 10.5.8]
-- 
Dave

[toc] | [prev] | [next] | [standalone]

#23397

Dave Allen <kneeljung@gmail.com> wrote:

> In article <S9ydnV1h3qG7h-LSnZ2dnUVZ_vGdnZ2d@earthlink.com>,
>  Ant <ant@zimage.comANT> wrote:
> 
> > On 4/5/2012 2:40 AM PT, Paul Sture typed:
> > 
> > > Thanks, I forgot to mention disabling Java.  I have disabled it in my
> > > browsers as well.
> > 
> > Don't forget to disable it through Utilities' Java Preference!
> 
> Okay, I've opened Java Preferences from Utilities,but I have no idea 
> what i need to do with it to disable Java.  Do I simply uncheck all of
> the boxes under the General tab?  [Mac OS 10.5.8]

Yes.

The various boxes in the On column control different versions of the
Java virtual machine. It might be useful to selectively enable them if
you had a Java app which needed a specific version of Java and did't
work with later versions, or it had a problem with 32-bit vs 64-bit.

Looks like the default under 10.5 on an Intel machine is for J2SE 5.0
(32-bit and 64-bit) and 64-bit Java SE 6 to be enabled, but not J2SE
1.4.2. If I remember right, 64-bit Java only exists on Intel.

(J2SE = "Java 2 Standard Edition", by the way.)

-- 
David Empson
dempson@actrix.gen.nz

[toc] | [prev] | [next] | [standalone]

#23435

In article <1ki6lku.rot36c5eqzkiN%dempson@actrix.gen.nz>,
 dempson@actrix.gen.nz (David Empson) wrote:

> Dave Allen <kneeljung@gmail.com> wrote:
> 
> > Okay, I've opened Java Preferences from Utilities,but I have no idea 
> > what i need to do with it to disable Java.  Do I simply uncheck all of
> > the boxes under the General tab?  [Mac OS 10.5.8]
> 
> Yes.
> 
> The various boxes in the On column control different versions of the
> Java virtual machine. It might be useful to selectively enable them if
> you had a Java app which needed a specific version of Java and did't
> work with later versions, or it had a problem with 32-bit vs 64-bit.
> 
> Looks like the default under 10.5 on an Intel machine is for J2SE 5.0
> (32-bit and 64-bit) and 64-bit Java SE 6 to be enabled, but not J2SE
> 1.4.2. If I remember right, 64-bit Java only exists on Intel.
> 
> (J2SE = "Java 2 Standard Edition", by the way.)

Thanks, David. That takes care of the one machine I have that's not 
running Lion. It was probably the least likely one to be affected anyway 
since it's a five year old MacBook that I keep in reserve and only use 
when the new MacBook Pro isn't available.
-- 
Dave

[toc] | [prev] | [next] | [standalone]

#23418

On 4/6/2012 5:03 PM PT, Dave Allen typed:

>>> Thanks, I forgot to mention disabling Java.  I have disabled it in my
>>> browsers as well.
>>
>> Don't forget to disable it through Utilities' Java Preference!
>
> Okay, I've opened Java Preferences from Utilities,but I have no idea
> what i need to do with it to disable Java.  Do I simply uncheck all of
> the boxes under the General tab?  [Mac OS 10.5.8]

That is what I did in there beside disabling Java in web browsers. Then, 
you can go to http://javatester.org/, http://java.com, or any trusted 
web site with Java applets to see if Java is disabled.
-- 
"Each of us needs to withdraw from the cares which will not withdraw 
from us. We need hours of aimless wandering or spates of time sitting on 
park benches, observing the mysterious world of ants and the canopy of 
treetops." --Maya Angelou (b. 1928) American writer and entertainer
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

Page 2 of 3 — ← Prev page 1 [2] 3  Next page →

Back to top | Article view | comp.sys.mac.system

csiph-web