This is a read-only archive of the old Scratch 1.x Forums.
Try searching the current Scratch discussion forums.

#1 2010-08-21 19:32:33

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Java Exploits

I'm extremely glad Scratch is moving away from Java. Scratch is really the only reason I ever use it. Not only is it pretty slow, but I've also had a few problems with Java exploits.

I've got Microsoft Security Essentials on my Windows 7 computer, and it does a great job detecting and removing viruses. I'm also pretty careful about the programs I download and the content that I view. Unfortunately, I was unaware of how insecure Java is.

Just today MSE detected two Java related viruses.

Exploit:Java/CVE-2010-0094.A
Trojan:Java/Rowindal.A

They got removed and all is well, but I was unsurprised that they were Java related. In the past year and a half I've owned this computer, all the potentially harmful files on my computer that I've had to remove were from Java.

So. Post similar experiences you've had and/or if you are thankful Scratch is no longer going to use Java.  smile

Offline

 

#2 2010-08-21 21:25:54

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

*bump*
Others Miscellaneous topics get views in seconds. Why not this?...

Offline

 

#3 2010-08-21 22:54:49

67589jun
Scratcher
Registered: 2007-07-13
Posts: 1000+

Re: Java Exploits

Because there is no way to prove those were actually malicious files.


http://i.imgur.com/I1DuR.png

Offline

 

#4 2010-08-22 03:47:59

TheCatAndTheBanana
Scratcher
Registered: 2008-03-21
Posts: 1000+

Re: Java Exploits

Nortons flaging up java alot foer me - so i have to download projects to play them...


My Newest Project!
Ceta? wat r u doin? CETA! STAHP!

Offline

 

#5 2010-08-22 09:26:52

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

67589jun wrote:

Because there is no way to prove those were actually malicious files.

Actually, they WERE of malicious intent. I googled both of them and found that they came in a package. I don't quite remember what they did though...

Anyway, I trust MSE and the other five people who posted about it online (neither of them are very common).

Offline

 

#6 2010-08-22 09:30:33

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

TheCatAndTheBanana wrote:

Nortons flaging up java alot foer me - so i have to download projects to play them...

Oh... That's not good. Personally I can't STAND Norton.
Not only do you pay for what you can get free in other security programs, it gives you all sorts of expiration warnings consistently when your subscription expires.

Personally, if I were you I would go with Chrome and MSE.

Offline

 

#7 2010-08-22 10:01:06

meowmeow55
Scratcher
Registered: 2008-12-24
Posts: 1000+

Re: Java Exploits

shadow_7283 wrote:

TheCatAndTheBanana wrote:

Nortons flaging up java alot foer me - so i have to download projects to play them...

Oh... That's not good. Personally I can't STAND Norton.
Not only do you pay for what you can get free in other security programs, it gives you all sorts of expiration warnings consistently when your subscription expires.

Yes! I had Norton preinstalled on my HP laptop, and it was so annoying! But now I have MSE, which is doing great! It made a false detection on a program once, though, but I sent a sample to Microsoft and they promptly fixed the definitions database.  big_smile

Anyway, I actually haven't gotten any Java-related malware.


Yawn.

Offline

 

#8 2010-08-22 10:09:25

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

meowmeow55 wrote:

Yes! I had Norton preinstalled on my HP laptop, and it was so annoying! But now I have MSE, which is doing great! It made a false detection on a program once, though, but I sent a sample to Microsoft and they promptly fixed the definitions database.  big_smile

Yep. Norton came pre-installed on my HP too.

meowmeow55 wrote:

Anyway, I actually haven't gotten any Java-related malware.

That's good. The reason Java is so unsecure is that it is completely open source. So it isn't hard for an experienced hacker to trick the browser into thinking it's running just an average Java applet.

Offline

 

#9 2010-08-22 14:12:00

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

*bump*

Offline

 

#10 2010-08-22 14:15:08

kiwi95
Scratcher
Registered: 2009-07-02
Posts: 1000+

Re: Java Exploits

I haven't had problems with it. Just it keeps wanting me to update. And tbh, I really can't be bothered with it. XD

Offline

 

#11 2010-08-22 15:59:10

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

*bumpady bump bump*

Offline

 

#12 2010-08-22 19:45:24

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Java Exploits

I have never had any Java viruses.

The only viruses I have had in the last two years are:

JS (JavaScript)/Pakes
Exploit (nothing special)

Nether show much on Google.


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#13 2010-08-22 19:54:37

ThePCKid
Scratcher
Registered: 2009-09-16
Posts: 1000+

Re: Java Exploits

@above conversation:
Norton infected my old PC

Offline

 

#14 2010-08-22 20:58:29

MasterOfDeception
Scratcher
Registered: 2009-12-29
Posts: 100+

Re: Java Exploits

shadow_7283 wrote:

TheCatAndTheBanana wrote:

Nortons flaging up java alot foer me - so i have to download projects to play them...

Oh... That's not good. Personally I can't STAND Norton.
Not only do you pay for what you can get free in other security programs, it gives you all sorts of expiration warnings consistently when your subscription expires.

Personally, if I were you I would go with Chrome and MSE.

QFT but I am unfortunently stuck with norton.
and no I haven't gotten anything bad from Java...
Yet.
I'm scared now.
lol


"My Language Arts teacher beat Chuck Norris up." -12three

Offline

 

#15 2010-08-22 21:21:34

fg123
Scratcher
Registered: 2008-11-13
Posts: 1000+

Re: Java Exploits

Wow. That's scary. I have no experience with that...


Hai.

Offline

 

#16 2010-08-23 00:34:18

fg123
Scratcher
Registered: 2008-11-13
Posts: 1000+

Re: Java Exploits

Oh, my god. Tonight I cleaned my computer with MSE, and a whole bunch of Java exploits came up. o.0


Hai.

Offline

 

#17 2010-08-23 00:37:49

throughthefire
Scratcher
Registered: 2009-07-09
Posts: 1000+

Re: Java Exploits

Wow, that's scary! I'm scared, better run a computer checkup...


Back. For now. Maybe.

Offline

 

#18 2010-08-23 11:48:38

fg123
Scratcher
Registered: 2008-11-13
Posts: 1000+

Re: Java Exploits

Best using Microsoft Secuirity essentials.


Hai.

Offline

 

#19 2010-08-23 17:32:51

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

fg123 wrote:

Oh, my god. Tonight I cleaned my computer with MSE, and a whole bunch of Java exploits came up. o.0

Yay! Finally a post that doesn't disagree with this topic. XD Good thing you cleared them up.

Really, there is no point at all in running quick scans. Do full scans. They're the only ones that catch ANYTHING. Virus creators aren't dumb. They know that half of MSE users only ever do quick scans, and they'll adjust their viruses accordingly.

The only problem with full scans is that they take six hours for me.  sad

Offline

 

#20 2010-08-23 17:34:00

fg123
Scratcher
Registered: 2008-11-13
Posts: 1000+

Re: Java Exploits

shadow_7283 wrote:

fg123 wrote:

Oh, my god. Tonight I cleaned my computer with MSE, and a whole bunch of Java exploits came up. o.0

Yay! Finally a post that doesn't disagree with this topic. XD Good thing you cleared them up.

Really, there is no point at all in running quick scans. Do full scans. They're the only ones that catch ANYTHING. Virus creators aren't dumb. They know that half of MSE users only ever do quick scans, and they'll adjust their viruses accordingly.

The only problem with full scans is that they take six hours for me.  sad

Actually, me too. I didn't fullscan. It took 2 hours for a quarter of the scan. So I canceled it, and quicked scanned . And I got the java exploits.


Hai.

Offline

 

#21 2010-08-23 17:34:26

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

Huh. Maybe you changed the quick scan settings?

Offline

 

#22 2010-08-25 17:59:31

shadow_7283
Scratcher
Registered: 2007-11-07
Posts: 1000+

Re: Java Exploits

*bump*

Offline

 

Board footer