Home Business IT Security Apple deepens Java block
Apple deepens Java block Featured
Get all your tech news delivered to your mail box five days a week
iTWire UPDATE - it's FREE!


Apple has again updated its web plug-in blocking mechanism in order to prevent outdated and vulnerable versions of Java being used by web browsers.

XProtect arrived on the Mac as part of Mac OS X 10.6 Snow Leopard. Its purpose is to provide a remote 'kill switch' to prevent applications from running.

It was originally applied to prevent certain pieces of malware from running, but more recently Apple has used it to prevent old and vulnerable versions of Java from running in a browser.

Vulnerabilities in Java have made it possible to launch Windows-style 'drive-by' attacks on Macs. Malicious Java code embedded in a web page could be used to install malware when the page is opened, with no obvious indication to the user that something is amiss.

This technique was used successfully earlier this year to infect systems inside Apple and Facebook.

Part of the problem is that some users are slow to update to new versions of Java. This can be simply inertia (laziness?), but it can also be due to incompatibilities between the updated version of Java and existing applications and applets that the user needs to run.

Apple has been forcing users' hands by blacklisting older versions via XProtect, which is automatically updated.

The latest XProtect update disables the web plug-in for all versions of Java prior to Java 6 update 51 (the current version from Apple) and Java 7 update 25 (the current version from Oracle, for Lion and Mountain Lion only).

ITWIRE SERIES - REVENUE-CRITICAL APPS UNDERPERFORMING?

Avoid War Room Scenarios and improve handling of critical application problems:

• Track all transactions, end-to-end, all the time and know what your users experience 24/7

• View code level details with context and repair problems quickly

• Fix problems in minutes before they wreak havoc

• Optimize your most important applications, Java, .NET, PHP, C/C++ and many more

Start your free trial today!

CLICK FOR FREE TRIAL!

ITWIRE SERIES - IS YOUR BACKUP STRATEGY COSTING YOU CLIENTS?

Where are your clients backing up to right now?

Is your DR strategy as advanced as the rest of your service portfolio?

What areas of your business could be improved if you outsourced your backups to a trusted source?

Read the industry whitepaper and discover where to turn to for managed backup

FIND OUT MORE!

Stephen Withers

joomla visitors

Stephen Withers is one of Australia¹s most experienced IT journalists, having begun his career in the days of 8-bit 'microcomputers'. He covers the gamut from gadgets to enterprise systems. In previous lives he has been an academic, a systems programmer, an IT support manager, and an online services manager. Stephen holds an honours degree in Management Sciences, a PhD in Industrial and Business Studies, and is a senior member of the Australian Computer Society.

Connect