Java-Gaming.org    
Featured games (79)
games approved by the League of Dukes
Games in Showcase (477)
Games in Android Showcase (106)
games submitted by our members
Games in WIP (533)
games currently in development
News: Read the Java Gaming Resources, or peek at the official Java tutorials
 
    Home     Help   Search   Login   Register   
Pages: [1]
  ignore  |  Print  
  Java 7 Update 21 Security and Application Signing  (Read 1615 times)
0 Members and 1 Guest are viewing this topic.
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Posted 2013-04-18 06:12:59 »

Interesting development on the security front:

Quote
Changes to Java Control Panel's Security Settings
In this release, low and custom settings are removed from the Java Control Panel(JCP)'s Security Slider.

Depending on the security level set in the Java Control Panel and the user's version of the JRE, self-signed or unsigned applications might not be allowed to run. The default setting of High permits all but local applets to run on a secure JRE. If the user is running an insecure JRE, only applications that are signed with a certificate issued by a recognized certificate authority are allowed to run.

For more information, see the Security section of the Java Control Panel documentation.

APPLET and APPLICATION seem to be used somewhat interchangeably in the above.  I'm assuming this applies to both, and that it means from now on, an old JRE will only execute applications/applets that are signed with a traceable certificate.  Considering the number of updates recently and that JREs now have a built in expiry date (I assume this does something - obviously not checked), maybe it's time to buy a proper certificate.  Can't really justify the expense though.  Probably I'll just carry on as normal and insist on the latest JRE.  Incidentally, there's now little point in writing code for an older JRE, so as to get a larger user base (unless signing with a traceable cert).

Ho Hum.  Lets go install and take a look.

Time flies like a bird. Fruit flies like a banana.
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Reply #1 - Posted 2013-04-18 06:30:06 »

The new update appears to break the keyboard routine I've used for this years (and previous) Java4k games (at least on OSX).  It looks like I'm not detecting Key Up events any more.  Maybe I'll go for a reboot, just in case my computer is confused.

Incidentally the unsigned applet warning box still comes up and now has red text warning that the applet is a security risk.

Edit: None of my recent Java4k games works on OSX now (Falcon4k, Assassins4k, Mage Wars and Die Z are all broken).  I guess I'll have to upgrade my PC later and check that too.  Bother - that was a really minimal key handler.  Can I be bothered to update the older programs?  Might do Mage Wars and Die Z as they were both built on my current Java4k tool chain.  Not sure whether to do the others. Bother Bother and bother.

I haven't checked my really old entries Frag4k and Speed4k, but they used a different keyboard handler, so might still work.

Edit2: None (that is no ones, not just mine) of the old webstart stuff loads anymore on my Mac, possibly needs an update to the jnlp files.  So in summary, none of my stuff on Java4k works anymore, at least on OSX.  I think I'll contain my excitement and check whether it works on the PC this evening. 

Time flies like a bird. Fruit flies like a banana.
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Reply #2 - Posted 2013-04-18 07:59:29 »

KEY_RELEASE: It's a bug.  First seen on Firefox.  Now also on Safari.  I installed a Safari update at the same time as the Java update and that is probably the cause of the lack of KEY_RELEASE events.  It isn't clear how to work around this.

https://bugzilla.mozilla.org/show_bug.cgi?id=849172

Also look down at comment 13, which fingers the latest version of Safari as similarly bugged.

Time flies like a bird. Fruit flies like a banana.
Games published by our own members! Check 'em out!
Legends of Yore - The Casual Retro Roguelike
Offline gimbal

JGO Knight


Medals: 25



« Reply #3 - Posted 2013-04-18 17:06:13 »

Oracle seems to be on a poorly communicated security lock down warpath. LiveConnect also has some hammering done on it, as this thread is testimony to:

https://forums.oracle.com/forums/thread.jspa?threadID=2525685
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Reply #4 - Posted 2013-04-18 21:15:24 »

I updated my PC, and java just hangs.  Uninstalled it and Java 6 worked Ok.  Installed Java 7 SDK including JRE and again nothing works.  Admittedly my PC is full of stuff so there's probably an incompatability somewhere.  Overall it's been a terrible day w.r.t java.  It's enough to make me turn to Flash  persecutioncomplex

Edit: Reverted to Java 7 Update 17:

Time flies like a bird. Fruit flies like a banana.
Offline Riven
« League of Dukes »

JGO Overlord


Medals: 743
Projects: 4
Exp: 16 years


Hand over your head.


« Reply #5 - Posted 2013-04-18 21:27:15 »

Presumably only applets and webstart are affected / hanging?

Hi, appreciate more people! Σ ♥ = ¾
Learn how to award medals... and work your way up the social rankings
Offline Alan_W

JGO Knight


Medals: 8
Projects: 3


Java tames rock!


« Reply #6 - Posted 2013-04-18 21:30:31 »

Sorry, but I didn't check command line.

Time flies like a bird. Fruit flies like a banana.
Pages: [1]
  ignore  |  Print  
 
 
You cannot reply to this message, because it is very, very old.

 

Add your game by posting it in the WIP section,
or publish it in Showcase.

The first screenshot will be displayed as a thumbnail.

pw (25 views)
2014-07-24 01:59:36

Riven (25 views)
2014-07-23 21:16:32

Riven (19 views)
2014-07-23 21:07:15

Riven (22 views)
2014-07-23 20:56:16

ctomni231 (51 views)
2014-07-18 06:55:21

Zero Volt (46 views)
2014-07-17 23:47:54

danieldean (37 views)
2014-07-17 23:41:23

MustardPeter (40 views)
2014-07-16 23:30:00

Cero (56 views)
2014-07-16 00:42:17

Riven (55 views)
2014-07-14 18:02:53
HotSpot Options
by dleskov
2014-07-08 03:59:08

Java and Game Development Tutorials
by SwordsMiner
2014-06-14 00:58:24

Java and Game Development Tutorials
by SwordsMiner
2014-06-14 00:47:22

How do I start Java Game Development?
by ra4king
2014-05-17 11:13:37

HotSpot Options
by Roquen
2014-05-15 09:59:54

HotSpot Options
by Roquen
2014-05-06 15:03:10

Escape Analysis
by Roquen
2014-04-29 22:16:43

Experimental Toys
by Roquen
2014-04-28 13:24:22
java-gaming.org is not responsible for the content posted by its members, including references to external websites, and other references that may or may not have a relation with our primarily gaming and game production oriented community. inquiries and complaints can be sent via email to the info‑account of the company managing the website of java‑gaming.org
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines | Managed by Enhanced Four Valid XHTML 1.0! Valid CSS!