Home Business IT Security Apple deepens Java block

Apple deepens Java block Featured

Apple has again updated its web plug-in blocking mechanism in order to prevent outdated and vulnerable versions of Java being used by web browsers.

XProtect arrived on the Mac as part of Mac OS X 10.6 Snow Leopard. Its purpose is to provide a remote 'kill switch' to prevent applications from running.

It was originally applied to prevent certain pieces of malware from running, but more recently Apple has used it to prevent old and vulnerable versions of Java from running in a browser.

Vulnerabilities in Java have made it possible to launch Windows-style 'drive-by' attacks on Macs. Malicious Java code embedded in a web page could be used to install malware when the page is opened, with no obvious indication to the user that something is amiss.

This technique was used successfully earlier this year to infect systems inside Apple and Facebook.

Part of the problem is that some users are slow to update to new versions of Java. This can be simply inertia (laziness?), but it can also be due to incompatibilities between the updated version of Java and existing applications and applets that the user needs to run.

Apple has been forcing users' hands by blacklisting older versions via XProtect, which is automatically updated.

The latest XProtect update disables the web plug-in for all versions of Java prior to Java 6 update 51 (the current version from Apple) and Java 7 update 25 (the current version from Oracle, for Lion and Mountain Lion only).

FREE WHITEPAPER - REMOTE SUPPORT TRENDS FOR 2015

Does your remote support strategy keep you and your CEO awake at night?

Today’s remote support solutions offer much more than just remote control for PCs. Their functional footprint is expanding to include support for more devices and richer analytics for trend analysis and supervisor dashboards.

It is imperative that service executives acquaint themselves with the new features and capabilities being introduced by leading remote support platforms and find ways to leverage the capabilities beyond technical support.

Field services, education services, professional services, and managed services are all increasing adoption of these tools to boost productivity and avoid on-site visits.

Which product is easiest to deploy, has the best maintenance mode capabilities, the best mobile access and custom reporting, dynamic thresholds setting, and enhanced discovery capabilities?

To find out all you need to know about using remote support to improve your bottom line, download this FREE Whitepaper.

DOWNLOAD!

Stephen Withers

joomla visitors

Stephen Withers is one of Australia¹s most experienced IT journalists, having begun his career in the days of 8-bit 'microcomputers'. He covers the gamut from gadgets to enterprise systems. In previous lives he has been an academic, a systems programmer, an IT support manager, and an online services manager. Stephen holds an honours degree in Management Sciences, a PhD in Industrial and Business Studies, and is a senior member of the Australian Computer Society.

Connect