Java-Gaming.org    
Featured games (91)
games approved by the League of Dukes
Games in Showcase (581)
games submitted by our members
Games in WIP (500)
games currently in development
News: Read the Java Gaming Resources, or peek at the official Java tutorials
 
    Home     Help   Search   Login   Register   
Pages: [1] 2
  ignore  |  Print  
  Java 7.10 Plugin blocked on Mac  (Read 5592 times)
0 Members and 1 Guest are viewing this topic.
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Posted 2013-01-11 05:40:29 »

This morning, my mac (safari) blocked the 7.10 plugin, stating I needed to download the latest version.  However since that is the latest version, obviously that isn't going to help.  Presumably this is apple's response to the latest zero-day exploit, putting the ball in oracle's court to produce a fix.

Fine in many ways, but it stops me checking for compatibility on the mac.  Hopefully this is less of an issue these days anyway, since oracle is now supplying the jvm, but grouch grouch grouch.

I suppose I ought to disable the java plugin on my PC too for the time being.  Maybe I should run two browsers, one for general use with no java, and one for sites where I specifically need java.

Time flies like a bird. Fruit flies like a banana.
Offline ReBirth
« Reply #1 - Posted 2013-01-11 05:47:51 »

Ya that's all hiccup today about Java 7u10 applet exploit.

Offline davedes
« Reply #2 - Posted 2013-01-11 09:22:23 »

Java 7 won't work in Chrome at all.

Java 7 also doesn't work on any Macs earlier than 10.7. A large percentage of users are still running Snow Leopard (myself included).

And of course the current release of LWJGL (and thus Slick/LibGDX) does not work with Mac and Java 7. Fortunately this will be fixed soon.

The whole thing is a huge mess... Cranky

Games published by our own members! Check 'em out!
Legends of Yore - The Casual Retro Roguelike
Offline ReBirth
« Reply #3 - Posted 2013-01-11 09:23:44 »

I use OpenJDK for applet player.

Offline TifantaWorld

Senior Newbie





« Reply #4 - Posted 2013-01-11 10:39:51 »

As for the Chrome thing, the ball is in Google's court to make a 64-bit version of their browser.
Offline theagentd
« Reply #5 - Posted 2013-01-11 22:45:45 »

What's this about LWJGL not working with Java 1.7? My workspace says otherwise...

Myomyomyo.
Offline Regenuluz
« Reply #6 - Posted 2013-01-12 16:57:06 »

It annoys me to no end that Apple just disables stuff without any explanation. But they fail at it, because applets still run fine in Firefox. -.-


What's this about LWJGL not working with Java 1.7? My workspace says otherwise...

LWJGL does not work on OS X with Java 7, at least not their 2.8.5 version.
Offline Sickan

Senior Member


Medals: 8



« Reply #7 - Posted 2013-01-13 15:22:57 »

If you absolutely must use LWJGL on Mac 10.7+ and use Java 7, you can checkout some of the links here. From what I've seen a lot of things seem to work.

I'm just here to learn.
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Reply #8 - Posted 2013-01-13 16:01:51 »

I got a 'blackhole' toolkit attack after visiting java-samples dot com.  Blocked, but I'd stay clear.  Looks ad related.
Have up'd all my security settings, but have whitelisted java-gaming and java4k sites for the moment.

Time flies like a bird. Fruit flies like a banana.
Offline gene9

Senior Member


Medals: 8



« Reply #9 - Posted 2013-01-13 22:58:25 »

I suppose I ought to disable the java plugin on my PC too for the time being.  Maybe I should run two browsers, one for general use with no java, and one for sites where I specifically need java.

I'm a huge fan of the Java development ecosystem, but the Java applet web browser plugin seems like an idea passed it's time.

What does anyone actually use the Java web plugin for?
Games published by our own members! Check 'em out!
Legends of Yore - The Casual Retro Roguelike
Online princec

JGO Kernel


Medals: 284
Projects: 3
Exp: 16 years


Eh? Who? What? ... Me?


« Reply #10 - Posted 2013-01-13 23:17:45 »

java4k and Minecraft Smiley

Apparently a lot of European business websites like banks use it.

Cas Smiley

Offline kappa
« League of Dukes »

JGO Kernel


Medals: 70
Projects: 15


★★★★★


« Reply #11 - Posted 2013-01-14 00:53:21 »

Oracle have released a fix the above exploits, announcement here.

They've also switched the default Java Security Settings Level to High, basically meaning all Java applets will now be click to start (no more drive by Java attacks).

Just painful watching the Java Applet plugin situation slowly moving from bad to obsolete over the years.
Online princec

JGO Kernel


Medals: 284
Projects: 3
Exp: 16 years


Eh? Who? What? ... Me?


« Reply #12 - Posted 2013-01-14 01:05:00 »

All unsigned applets, that is. I think only Very High causes it to trigger for all applets.

Cas Smiley

Offline kappa
« League of Dukes »

JGO Kernel


Medals: 70
Projects: 15


★★★★★


« Reply #13 - Posted 2013-01-14 01:08:46 »

All unsigned applets, that is. I think only Very High causes it to trigger for all applets.

Cas Smiley
On the Very High setting unsigned applets won't run. On High, you will be prompted before any unsigned Java app runs in the browser. If the JRE is below the security baseline, you will be given an option to update. There is already a prompt for signed/self-signed applets, so basically all applets now have a prompt (a double prompt in Chrome).
Online princec

JGO Kernel


Medals: 284
Projects: 3
Exp: 16 years


Eh? Who? What? ... Me?


« Reply #14 - Posted 2013-01-14 01:11:41 »

Given the security woes around Java in the browser you wonder why they didn't set it to Very High in the first place.

Cas Smiley

Offline gouessej

« In padded room »



TUER


« Reply #15 - Posted 2013-01-14 01:16:28 »


And of course the current release of LWJGL (and thus Slick/LibGDX) does not work with Mac and Java 7.
Sorry to contradict you but there is a JOGL 2.0 backend for LibGDX that works fine on latest Macs, just have a look at my Github account.

Offline gene9

Senior Member


Medals: 8



« Reply #16 - Posted 2013-01-14 04:51:38 »

java4k and Minecraft Smiley

Apparently a lot of European business websites like banks use it.

You can just download Minecraft and other Java games. I don't see a good reason for a bank to use a Java applet. I guess the Chrome model of always blocking until the user explicitly allows is appropriate.
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Reply #17 - Posted 2013-01-14 07:20:07 »

I've updated my Mac.  It now defaults to High settings, where it gives a security prompt if the applet requests a non-current version of the JRE.  Question is does compiling for 1.7 make it go away, or do we need to wait for a JDK update?  It might be a bit pointless anyway, if it means the latest point release, as applets would require constant recompilation.
Edit: Nope - the warning always comes up.

Updating my PC is going to be a pain as I have the standalone JFX 2 installed.  Apparently I need to deinstall it first, then upgrade the JRE.  I hope this isn't going to make a mess. Don't have time to do that for a bit, so will have to leave the PC java blocked for most sites for the time being.

Time flies like a bird. Fruit flies like a banana.
Offline Regenuluz
« Reply #18 - Posted 2013-01-14 11:32:56 »

You can just download Minecraft and other Java games. I don't see a good reason for a bank to use a Java applet. I guess the Chrome model of always blocking until the user explicitly allows is appropriate.

The banks in Denmark all use Java applets(As well as all official stuff like tax, etc. etc. etc.) for 2-factor authentication, called Nem ID(Which is more or less a piece of crap xD), though I don't see why they need to use Java for it. I'm fairly sure it could all be written in pure html though(The login form, that is xD).
Online princec

JGO Kernel


Medals: 284
Projects: 3
Exp: 16 years


Eh? Who? What? ... Me?


« Reply #19 - Posted 2013-01-14 12:43:27 »

Turns out to be pretty difficult to get browsers to all behave in the same ways and securely. The Java plugin actually minimises your risks and targets, from the banks perspective. However it then also occasionally snafus incredibly badly with this sort of driveby attack.

Cas Smiley

Offline ReBirth
« Reply #20 - Posted 2013-01-14 13:44:48 »

java4k and Minecraft Smiley

Apparently a lot of European business websites like banks use it.

Cas Smiley
And Keepvid for me Roll Eyes

Offline Varkas
« Reply #21 - Posted 2013-01-14 16:47:15 »

However it then also occasionally snafus incredibly badly with this sort of driveby attack.

The bad thing is, that people often don't understand that Java is still a fine programming language and summarize such accidents to "Java is bad".

if (error) throw new Brick(); // Blog (german): http://gedankenweber.wordpress.com
Online princec

JGO Kernel


Medals: 284
Projects: 3
Exp: 16 years


Eh? Who? What? ... Me?


« Reply #22 - Posted 2013-01-16 21:36:08 »

And again, this time with feeling!

Cas Smiley

Offline cheatsguy

Junior Member


Medals: 3


Gamer turned Pixel Artist turned Programmer


« Reply #23 - Posted 2013-01-17 14:09:40 »


The bad thing is, that people often don't understand that Java is still a fine programming language and summarize such accidents to "Java is bad".


Its quite sad, this is like how many people are terrified of dying in a plane crash when you're over 1,000 times more likely to die in a car accident, because car Accidents never make the news but plane crashes do.

Busy between school, work, life, games, programming and general screwing around.
If you'd like some pixel art for your game, send me a PM, i'll see what I can do.
Current project: http://elementalwarblog.wordpress.com/
Online princec

JGO Kernel


Medals: 284
Projects: 3
Exp: 16 years


Eh? Who? What? ... Me?


« Reply #24 - Posted 2013-01-17 14:18:55 »

People aren't afraid of dying instantly in plane crashes - they are afraid of 4 minutes of utter terror waiting to die. Car crashes happen so fast you often don't know you're going to have one until the screech of rubber.

Cas Smiley

Offline ReBirth
« Reply #25 - Posted 2013-01-17 14:31:45 »

Also mostly in car you're the driver, on plane you bid your life to others' exp and luck.

Offline Best Username Ever

Junior Member





« Reply #26 - Posted 2013-01-18 00:05:38 »


The bad thing is, that people often don't understand that Java is still a fine programming language and summarize such accidents to "Java is bad".


Its quite sad, this is like how many people are terrified of dying in a plane crash when you're over 1,000 times more likely to die in a car accident, because car Accidents never make the news but plane crashes do.

Or just use NoScript. (I don't think the analogy really fits.) For everyone else, click to start is good enough. I wish they did that with Flash. It would have spared people from a lot of viruses and full-volume, near-full-screen, flashing advertisements.
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Reply #27 - Posted 2013-01-31 22:17:20 »

Java 7.11 now blocked.  This is getting needlessly tedious.

Edit: <rant>Since OSX Java isn't an apple product any more, should they really be blocking it.  Surely this should be Oracle's call.  As thinks stand, apple are breaking various business apps without notice.  I gather the SAP client for OSX uses an applet.  There's also the usual complaints regarding online banking applets.  It makes me wonder if they would block any app they don't like in further, effectively extending the app store walled garden approach.  Will Flash be next?

Not that Oracle is blameless either.  The latest update doesn't work well with standalone installs of JavaFx 2 (on the PC), and apparently sometimes removes the entire Java 6 installation. </rant>

 

Time flies like a bird. Fruit flies like a banana.
Offline Mads

JGO Ninja


Medals: 24
Projects: 3


One for all!


« Reply #28 - Posted 2013-02-01 10:36:41 »

Apparently a lot of European business websites like banks use it.

Cas Smiley

Most public services in Denmark use applets to sign in, for security. Banks, taxes, educational institutions, public transport, drivers licenses and passports.

Online princec

JGO Kernel


Medals: 284
Projects: 3
Exp: 16 years


Eh? Who? What? ... Me?


« Reply #29 - Posted 2013-02-01 12:32:00 »

Well, maybe they could spend some of their billions and create their own custom, secure plugins based on OpenJDK 7, then.

Cas Smiley

Pages: [1] 2
  ignore  |  Print  
 
 
You cannot reply to this message, because it is very, very old.

 

Add your game by posting it in the WIP section,
or publish it in Showcase.

The first screenshot will be displayed as a thumbnail.

xsi3rr4x (55 views)
2014-04-15 18:08:23

BurntPizza (53 views)
2014-04-15 03:46:01

UprightPath (66 views)
2014-04-14 17:39:50

UprightPath (49 views)
2014-04-14 17:35:47

Porlus (66 views)
2014-04-14 15:48:38

tom_mai78101 (90 views)
2014-04-10 04:04:31

BurntPizza (151 views)
2014-04-08 23:06:04

tom_mai78101 (247 views)
2014-04-05 13:34:39

trollwarrior1 (204 views)
2014-04-04 12:06:45

CJLetsGame (211 views)
2014-04-01 02:16:10
List of Learning Resources
by SHC
2014-04-18 03:17:39

List of Learning Resources
by Longarmx
2014-04-08 03:14:44

Good Examples
by matheus23
2014-04-05 13:51:37

Good Examples
by Grunnt
2014-04-03 15:48:46

Good Examples
by Grunnt
2014-04-03 15:48:37

Good Examples
by matheus23
2014-04-01 18:40:51

Good Examples
by matheus23
2014-04-01 18:40:34

Anonymous/Local/Inner class gotchas
by Roquen
2014-03-11 15:22:30
java-gaming.org is not responsible for the content posted by its members, including references to external websites, and other references that may or may not have a relation with our primarily gaming and game production oriented community. inquiries and complaints can be sent via email to the info‑account of the company managing the website of java‑gaming.org
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines | Managed by Enhanced Four Valid XHTML 1.0! Valid CSS!