If you own UT2k3, I suggest you disable JavaScript NOW

[ThePerfectCore]

Well, either that, or just watch where you surf.

http://www.ina-community.com/forums/showthread.php?s=&threadid=270595

:eek: :eek: :eek:

[Visidex]

Disable Java, not JavaScript.

[ThePerfectCore]

Whatever. :rolleyes:

[SpliT71]

there is a difference :P

[Titan386]

I find this rather strange. Java applets are supposed to be run in such a way that they cannot access certain parts of the machine running them, and I would assume that the registry would be protected. Also, I was under the impression that Java is platform independent, so I wonder how this program could be coded in such a way that it accesses the registry, when there are many platforms that do not have a registry.

Perhaps I'm misinformed, but this just doesn't feel right to me.

[ThePerfectCore]

there is a difference :P

I know that, I accidently added "Script". Off my case, k?

I find this rather strange. Java applets are supposed to be run in such a way that they cannot access certain parts of the machine running them, and I would assume that the registry would be protected. Also, I was under the impression that Java is platform independent, so I wonder how this program could be coded in such a way that it accesses the registry, when there are many platforms that do not have a registry.

Perhaps I'm misinformed, but this just doesn't feel right to me.

It seemed a tad strange to me as well, but what with all these warez *****s who want our CD keys, why take the chance?

[Oni]

I was talking to a friend of mine, and he said that registry editing capabilities are built into MS Java for functionality. Real (Sun Microsystems) Java, doesn't have this functionality. So I think if you're using Real Java (such as is installed w/ Opera) you should be alright.

[Digital Pimp]

Originally posted by Oni
I was talking to a friend of mine, and he said that registry editing capabilities are built into MS Java for functionality. Real (Sun Microsystems) Java, doesn't have this functionality. So I think if you're using Real Java (such as is installed w/ Opera) you should be alright.

god bless microsoft... they are always making things SO much easier for us....:rolleyes:

Digital

[Pla]

Real java applet runs in a sandbox which doesn't have any access to the file system (not even for reading). There is no such term as registry in java.
However Java can very esaely use native code also written for a specific platform such as windows/80x86 (and do anything).

In order for java to use native code or to access the files system or to open network ports for listening it has to be outside of the applet sandbox. This can be done only with signed applets.

Signing applets garantees that nobody bewtween you and the server can change/hack the executable code. When loading a signed applet the JVM (IE MS JVM, Sun JVM...) checks if the signature is valid. If it is valid it pops up a dialog telling the user that the applet is signed by "..." and it requests some prevelegies to be graanted by the user (f.e. read/write access to the file system).

If you click yes, well the applet caan format your drive if it wants - same as any .exe file. If you click no - the applet stays in the sand box and doesn't make difference if it is running on windows, linux or mac - it won't have any access to the file system.

So what I suggest is when you see security question/warning - READ what it states and never automatically click yes without reaading what you agree to.

There are sites which use activeX controls and when you go to their page it opens a dialog to install gator or other spyware progs. If you don't read and click yes - you get spyware.

Even there may be a site displaying it will install something and you hve to agree to EULA - READ it!!!! It may say that you agree to pay them $$$$$. If you click yes - you may have to pay them big bucks!!

p.s. Excuse my maaaaany "a" - my keyboard is sticky on aaaa.