You're Gambling On Two Things
by Grif Thomas
- 1/18/13 11:39 AM
In Reply to: ADDENDUM - Will this be enough protection? by michhala
You're gambling that Norton and Oracle stay ahead of the malware writers.
See the links below which Norton "says" is proof that you won't get infected because they're ahead of the game with IPS signatures...:
http://www.symantec.com/connect/blogs/additional-protection-recent-java-zero-day
http://www.symantec.com/connect/blogs/java-zero-day-dished-cool-exploit-kit
And here's Oracle's assurance blog saying much the same:
https://blogs.oracle.com/security/entry/security_alert_for_cve_2013
So......if you want to be totally secure against Java exploits, you uninstall Java... The second option is to disable Java in the browser of your choice, or possibly uninstall it completely. If you feel safe enough because both your AV company and Java have taken the indicated steps, and maybe you don't visit dicey websites, then you might choose the second option. Obviously, the second option is more risky, but it may be the best one for you, specially if you use a lot of programs/websites that require Java.
Hope this helps.
Grif

Moderator
CNET Staff
Samsung Staff
Dell Staff