8/29/2012

[macsupport] Digest Number 9089

15 New Messages

Digest #9089
1a
Re: movie screenshots by "HAL9000" jrswebhome
2i
Re: Macs at risk from 'super dangerous' Java zero-day by "Randy B. Singer" randybrucesinger
2n
Re: Macs at risk from 'super dangerous' Java zero-day by "Randy B. Singer" randybrucesinger

Messages

Tue Aug 28, 2012 9:31 am (PDT) . Posted by:

"HAL9000" jrswebhome

Downloaded the iTunes movie .mv4 HD digital file. Tried opening the movie through VLC, but I only get a list of the file, and no video playing. I'll check in with Snapz-Pro, but was hoping for a free source. I'll check Handbrake, but I do not want to lose the HD rez. Thanks for your suggestions everyone. jr

--- In macsupportcentral@yahoogroups.com, "HAL9000" <jrswebhome@...> wrote:
>
> Bought a movie off itunes and want to take screen shots for my desktop. Anything free that will get the job done? Apple+Shift+3 doesn't. jr
>

Tue Aug 28, 2012 9:55 am (PDT) . Posted by:

"hester" drhester_06107



Thanks for the link. For those of us w Snow Leopard, is it enough to disable Java in Safari or should we go into applications-->utilities-->General and uncheck the "On" box for Java SE?
Thanks in advance

hester

--- In macsupportcentral@yahoogroups.com, "Bill B." <bill501@...> wrote:
>
> <http://www.computerworld.com/s/article/9230656/Macs_at_risk_from_super_dangerous_Java_zero_day>
>
> BB
>

Tue Aug 28, 2012 11:07 am (PDT) . Posted by:

"Bekah" bekalex

On Aug 28, 2012, at 9:55 AM, hester wrote:

> Thanks for the link. For those of us w Snow Leopard, is it enough to disable Java in Safari or should we go into applications-->utilities-->General and uncheck the "On" box for Java SE?
> Thanks in advance
>
> --- In macsupportcentral@yahoogroups.com, "Bill B." <bill501@...> wrote:
>>
>> <http://www.computerworld.com/s/article/9230656/Macs_at_risk_from_super_dangerous_Java_zero_day>

****

Where is this "applications --> utilities-- > General " thing?

I found the "applications --> utilities-- >Java Preferences and found two - :

true apple.util.JavaVMInfoGroup@693e4a5a apple.util.JavaVMInfoGroup@693e4a5a apple.util.JavaVMInfoGroup@693e4a5a apple.util.JavaVMInfoGroup@693e4a5a

true apple.util.JavaVMInfoGroup@7e7f8062 apple.util.JavaVMInfoGroup@7e7f8062 apple.util.JavaVMInfoGroup@7e7f8062 apple.util.JavaVMInfoGroup@7e7f8062

I turned them off - (or I un-checked the "on" box). Would this be correct?

Bekah

Tue Aug 28, 2012 11:11 am (PDT) . Posted by:

"Jim Saklad" jimdoc01

> For those of us w Snow Leopard, is it enough to disable Java in Safari or should we go into applications-->utilities-->General and uncheck the "On" box for Java SE?
> hester

Most of us don't need Java for anything we do on our Macs.

I would suggest the latter approach, and only revert to the former if turning Java off completely causes something that had been working to stop working.

Tue Aug 28, 2012 11:37 am (PDT) . Posted by:

"hester" drhester_06107



--- In macsupportcentral@yahoogroups.com, Bekah <bekah0176@...> wrote:

> ****
>
> Where is this "applications --> utilities-- > General " thing?
>
> I found the "applications --> utilities-- >Java Preferences and found two - :

>
> I turned them off - (or I un-checked the "on" box). Would this be correct?
>
> Bekah
>
you did it correctly. Here's a link for future reference:
http://www.maclife.com/article/howtos/how_protect_your_mac_javabased_malware

hester

Tue Aug 28, 2012 11:48 am (PDT) . Posted by:

"Jeannie" chloe898

I followed the directions, and that folder on my machine is empty. I am
running Mountain Lion.

Jeannie

On Tue, Aug 28, 2012 at 9:40 AM, Bill B. <bill501@mindspring.com> wrote:

> <
> http://www.computerworld.com/s/article/9230656/Macs_at_risk_from_super_dangerous_Java_zero_day
> >
>
> BB
>
>
> ------------------------------------
>
> Group FAQ:
> <http://www.macsupportcentral.com/policies/>
>
> Yahoo! Groups Links
>
>
>
>

--
Jeannie
View my images :
http://www.pbase.com/nikonjeannie

[Non-text portions of this message have been removed]

Tue Aug 28, 2012 11:55 am (PDT) . Posted by:

"John Masters" joemastersk

There really is no need to be worries about this as it affects only
Java 1.7 and the OS X version of Java is 1.6.

http://www.tuaw.com/2012/08/28/java-1-7-zero-day-exploit-unlikely-to-impact-most-mac-users/

John

On Tue, 28 Aug 2012 16:55:10 +0000, hester wrote:
>
>
> Thanks for the link. For those of us w Snow Leopard, is it enough to
> disable Java in Safari or should we go into
> applications-->utilities-->General and uncheck the "On" box for Java
> SE?
> Thanks in advance
>
> hester
>
> --- In macsupportcentral@yahoogroups.com, "Bill B." <bill501@...> wrote:
>>
>>
>
<http://www.computerworld.com/s/article/9230656/Macs_at_risk_from_super_dangerous_Java_zero_day>
>>
>> BB
>>
>
>

Tue Aug 28, 2012 12:48 pm (PDT) . Posted by:

"Forrest Leedy" forrkazu

Same here so I have to assume it was never installed. I know that I never installed it.

Forrest

On Aug 28, 2012, at 2:48 PM, Jeannie <nikonjeannie@gmail.com> wrote:

> I followed the directions, and that folder on my machine is empty. I am
> running Mountain Lion.
>
> Jeannie
>
> On Tue, Aug 28, 2012 at 9:40 AM, Bill B. <bill501@mindspring.com> wrote:
>
>> <
>> http://www.computerworld.com/s/article/9230656/Macs_at_risk_from_super_dangerous_Java_zero_day
>>>
>>
>> BB

Tue Aug 28, 2012 3:17 pm (PDT) . Posted by:

"Bill B." kernos501

JAVA in 10.7 and 10.8 is an optional install. If you use software that requires it, you will be given the option of installing JAVA. I have a couple of programs that do, so I installed it. But you can still delete the JAVA plugin alias from your "Internet Plugins" folder in the root Library. Or, you can disable it in your browser(s).

Bill B.

At 12:48 PM -0600 8/28/12, Jeannie wrote:
>I followed the directions, and that folder on my machine is empty. I am
>running Mountain Lion.
>
>Jeannie
>
>On Tue, Aug 28, 2012 at 9:40 AM, Bill B. <bill501@mindspring.com> wrote:
>
>> <
>> http://www.computerworld.com/s/article/9230656/Macs_at_risk_from_super_dangerous_Java_zero_day
>> >

Tue Aug 28, 2012 8:01 pm (PDT) . Posted by:

"Randy B. Singer" randybrucesinger

>>Macs at risk from 'super dangerous' Java zero-day

Yeah, except that they really aren't. Actually, not even close.

http://www.reedcorner.net/new-unpatched-java-vulnerability-discovered/

http://www.tuaw.com/2012/08/28/java-1-7-zero-day-exploit-unlikely-to-impact-most-mac-users/

This exploit (it's unclear if it is delivered as a Trojan Horse, or as a drive-by download), targets a Java vulnerability. However, it targets a version of Java that a Mac user would have to download from Oracle and install manually. The version of Java that Apple distributes isn't vulnerable.

Also, for now at least, this exploit only delivers a Window-specific payload.

Also, Lion and Mountain Lion don't have Java installed by default.

And...I don't know if I've mentioned this this discussion list previously, but Apple quietly added Google's "Safe Browsing" technology to Safari. This technology keeps a database of malicious Web sites constantly updated, and it warns users away from those sites. This means that Phishing sites and sites hosting or poisoned by "drive-by download" malware can't infect Mac users unless you ignore all the pop-up warnings! This technology is also in the latest Mac versions of Firefox and Chrome.
https://developers.google.com/safe-browsing/
http://www.macworld.com/article/1137094/safari_safe_browsing.html

So, it's probably a good idea to turn off Java (*not* JavaScript, which is something different) in your Web browser(s), and only turn it on when you navigate to a Web site that you know requires Java. This will also protect you from other Java vulnerabilities out there. But don't get excited about this new exploit going around, even if the press plays it up.

___________________________________________
Randy B. Singer
Co-author of The Macintosh Bible (4th, 5th, and 6th editions)

Macintosh OS X Routine Maintenance
http://www.macattorney.com/ts.html
___________________________________________

[Non-text portions of this message have been removed]

Tue Aug 28, 2012 8:22 pm (PDT) . Posted by:

"Curby Keith" clkeith50

Why didn't you warn me about this recent Java exploit that the PC magazine types are saying is dangerous to most Macs???????

And, read the message below to get the real story.

Curby

>________________________________
> From: Randy B. Singer <randy@macattorney.com>
>To: macsupportcentral@yahoogroups.com
>Sent: Tuesday, August 28, 2012 10:01 PM
>Subject: Re: [macsupport] Re: Macs at risk from 'super dangerous' Java zero-day
>
>
> 
>>>Macs at risk from 'super dangerous' Java zero-day
>
>Yeah, except that they really aren't. Actually, not even close.
>
>http://www.reedcorner.net/new-unpatched-java-vulnerability-discovered/
>
>http://www.tuaw.com/2012/08/28/java-1-7-zero-day-exploit-unlikely-to-impact-most-mac-users/
>
>This exploit (it's unclear if it is delivered as a Trojan Horse, or as a drive-by download), targets a Java vulnerability. However, it targets a version of Java that a Mac user would have to download from Oracle and install manually. The version of Java that Apple distributes isn't vulnerable.
>
>Also, for now at least, this exploit only delivers a Window-specific payload.
>
>Also, Lion and Mountain Lion don't have Java installed by default.
>
>And...I don't know if I've mentioned this this discussion list previously, but Apple quietly added Google's "Safe Browsing" technology to Safari. This technology keeps a database of malicious Web sites constantly updated, and it warns users away from those sites. This means that Phishing sites and sites hosting or poisoned by "drive-by download" malware can't infect Mac users unless you ignore all the pop-up warnings! This technology is also in the latest Mac versions of Firefox and Chrome.
>https://developers.google.com/safe-browsing/
>http://www.macworld.com/article/1137094/safari_safe_browsing.html
>
>So, it's probably a good idea to turn off Java (*not* JavaScript, which is something different) in your Web browser(s), and only turn it on when you navigate to a Web site that you know requires Java. This will also protect you from other Java vulnerabilities out there. But don't get excited about this new exploit going around, even if the press plays it up.
>
>___________________________________________
>Randy B. Singer
>Co-author of The Macintosh Bible (4th, 5th, and 6th editions)
>
>Macintosh OS X Routine Maintenance
>http://www.macattorney.com/ts.html
>___________________________________________
>
>[Non-text portions of this message have been removed]
>
>
>
>
>

[Non-text portions of this message have been removed]

Tue Aug 28, 2012 8:22 pm (PDT) . Posted by:

"Curby Keith" clkeith50

Why didn't you warn me about this recent Java exploit that the PC magazine types are saying is dangerous to most Macs???????

And, read the message below to get the real story.

Curby

>________________________________
> From: Randy B. Singer <randy@macattorney.com>
>To: macsupportcentral@yahoogroups.com
>Sent: Tuesday, August 28, 2012 10:01 PM
>Subject: Re: [macsupport] Re: Macs at risk from 'super dangerous' Java zero-day
>
>
> 
>>>Macs at risk from 'super dangerous' Java zero-day
>
>Yeah, except that they really aren't. Actually, not even close.
>
>http://www.reedcorner.net/new-unpatched-java-vulnerability-discovered/
>
>http://www.tuaw.com/2012/08/28/java-1-7-zero-day-exploit-unlikely-to-impact-most-mac-users/
>
>This exploit (it's unclear if it is delivered as a Trojan Horse, or as a drive-by download), targets a Java vulnerability. However, it targets a version of Java that a Mac user would have to download from Oracle and install manually. The version of Java that Apple distributes isn't vulnerable.
>
>Also, for now at least, this exploit only delivers a Window-specific payload.
>
>Also, Lion and Mountain Lion don't have Java installed by default.
>
>And...I don't know if I've mentioned this this discussion list previously, but Apple quietly added Google's "Safe Browsing" technology to Safari. This technology keeps a database of malicious Web sites constantly updated, and it warns users away from those sites. This means that Phishing sites and sites hosting or poisoned by "drive-by download" malware can't infect Mac users unless you ignore all the pop-up warnings! This technology is also in the latest Mac versions of Firefox and Chrome.
>https://developers.google.com/safe-browsing/
>http://www.macworld.com/article/1137094/safari_safe_browsing.html
>
>So, it's probably a good idea to turn off Java (*not* JavaScript, which is something different) in your Web browser(s), and only turn it on when you navigate to a Web site that you know requires Java. This will also protect you from other Java vulnerabilities out there. But don't get excited about this new exploit going around, even if the press plays it up.
>
>___________________________________________
>Randy B. Singer
>Co-author of The Macintosh Bible (4th, 5th, and 6th editions)
>
>Macintosh OS X Routine Maintenance
>http://www.macattorney.com/ts.html
>___________________________________________
>
>[Non-text portions of this message have been removed]
>
>
>
>
>

[Non-text portions of this message have been removed]

Tue Aug 28, 2012 9:12 pm (PDT) . Posted by:

"Earle Jones" earlejones501


On Aug 28, 12, at 8:22 PM, Curby Keith <clkeith50@yahoo.com> wrote:

> Why didn't you warn me about this recent Java exploit that the PC magazine types are saying is dangerous to most Macs???????
>
> And, read the message below to get the real story.
>
> Curby

*
What does PC Magazine know about Macs?

earle
*
_______________________
Earle Jones 
501 Portola Road #8008
Portola Valley CA 94028
Home: 650-424-4362
Cell: 650-269-0035
earle.jones@comcast.net

Tue Aug 28, 2012 10:02 pm (PDT) . Posted by:

"Harry F." harry.flaxman

Randy,

It was announced after the last 'zero day' that Apple was leaving Java to Oracle and not offering it through Software Update any longer. Is this not the case?

Harry

"Randy B. Singer" <randy@macattorney.com> wrote:

>>>Macs at risk from 'super dangerous' Java zero-day
>
>Yeah, except that they really aren't. Actually, not even close.
>
>http://www.reedcorner.net/new-unpatched-java-vulnerability-discovered/
>
>http://www.tuaw.com/2012/08/28/java-1-7-zero-day-exploit-unlikely-to-impact-most-mac-users/
>
>This exploit (it's unclear if it is delivered as a Trojan Horse, or as a drive-by download), targets a Java vulnerability. However, it targets a version of Java that a Mac user would have to download from Oracle and install manually. The version of Java that Apple distributes isn't vulnerable.
>
>Also, for now at least, this exploit only delivers a Window-specific payload.
>
>Also, Lion and Mountain Lion don't have Java installed by default.
>
>And...I don't know if I've mentioned this this discussion list previously, but Apple quietly added Google's "Safe Browsing" technology to Safari. This technology keeps a database of malicious Web sites constantly updated, and it warns users away from those sites. This means that Phishing sites and sites hosting or poisoned by "drive-by download" malware can't infect Mac users unless you ignore all the pop-up warnings! This technology is also in the latest Mac versions of Firefox and Chrome.
>https://developers.google.com/safe-browsing/
>http://www.macworld.com/article/1137094/safari_safe_browsing.html
>
>So, it's probably a good idea to turn off Java (*not* JavaScript, which is something different) in your Web browser(s), and only turn it on when you navigate to a Web site that you know requires Java. This will also protect you from other Java vulnerabilities out there. But don't get excited about this new exploit going around, even if the press plays it up.
>
>___________________________________________
>Randy B. Singer
>Co-author of The Macintosh Bible (4th, 5th, and 6th editions)
>
>Macintosh OS X Routine Maintenance
>http://www.macattorney.com/ts.html
>___________________________________________
>
>
>
>
>
>[Non-text portions of this message have been removed]
>
>
>
>------------------------------------
>
>Group FAQ:
><http://www.macsupportcentral.com/policies/>
>
> Yahoo! Groups Links
>
>
>

Wed Aug 29, 2012 1:10 am (PDT) . Posted by:

"Randy B. Singer" randybrucesinger


On Aug 28, 2012, at 10:02 PM, Harry F. wrote:

> It was announced after the last 'zero day' that Apple was leaving Java to Oracle and not offering it through Software Update any longer. Is this not the case?

Oracle is offering both direct downloads and automatic updates to Java:
http://arstechnica.com/apple/2012/08/oracle-releases-java-se-7-update-6-bringing-first-class-support-to-os-x/

If you want the latest update to Java, the only one that is susceptible to this new exploit, for now you can only get it via direct download.

___________________________________________
Randy B. Singer
Co-author of The Macintosh Bible (4th, 5th, and 6th editions)

Macintosh OS X Routine Maintenance
http://www.macattorney.com/ts.html
___________________________________________

[Non-text portions of this message have been removed]

GROUP FOOTER MESSAGE
Posted by at