|
|
|
| Authored by: Anonymous on Friday, January 11 2013 @ 02:06 PM EST |
Run Linux. Use Firefox or Google. Make sure the java plugin from Oracle is
the latest. Make sure the browser and Linux are the latest version.
Again, run the browse in Linux with a limited user account.
If you got to run Windows, either do the following:
1. run Linux in a VM on a Windows host and use your browser with java in the VM
-- or, a better solution --
2. run Windows in a VM on a Linux host, but use your browser with java on the
Linux host
When you are using a web site that does not need Java or JavaScript, disable
them.
I also usually keep all the crap from Adobe (Flash, Reader, etc) disabled in the
browser. Make sure anybodies third-party toolbar does not get installed. If it
does, uninstall or disable it.
It is much safer to use a free software version of flash or pdf reader because
the Linux/free software community considers security more important than Adobe
does.[ Reply to This | Parent | # ]
|
| |
| Authored by: Anonymous on Friday, January 11 2013 @ 02:08 PM EST |
Well, eighteen years, whatever. Sandboxing has improved greatly,
but remembering that bugs will always exist, the question still
remains from way back then,
Can I trust a total stranger to download and run arbitrary code
on my machine?
Note that the "total stranger" category now includes many
US govt divisions. If these really, really cannot do without Java,
then why can't I have a warning box pop up,
This site need to use Java. Yes/No?
and Java then gets turned on for only that one session on
only that one site. The pain, and the peril if I forget, is
turning Java off again when I close the browser window.
[ Reply to This | Parent | # ]
|
|
|
|
|
