[1949] in WWW Security List Archive
Re: Java/Netscape security holes: hole du jour and summary
daemon@ATHENA.MIT.EDU (Gene Ingram)
Wed May 1 16:20:02 1996
Date: Wed, 01 May 1996 10:35:00 -0700
From: Gene Ingram <gene@hpfsvr01.cup.hp.com>
Reply-To: www-security@ns2.rutgers.edu
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
-----BEGIN PGP SIGNED MESSAGE-----
Prentiss Riddle wrote:
>
> Forwarded from RISKS Digest 18.08.
>
> Note that Netscape Navigator 3.0b is out now, with no indication that
> Java holes found in 2.01 have been closed in 3.0b. See:
>
> http://www.mcom.com/comprod/products/navigator/version_3.0/index.html
> http://home.netscape.com/eng/mozilla/3.0/relnotes/unix-3.0b3.html
>
> -- Prentiss Riddle ("aprendiz de todo, maestro de nada") riddle@rice.edu
> -- RiceInfo Administrator, Rice University / http://is.rice.edu/~riddle
> -- Home office: 2002-A Guadalupe St. #285, Austin, TX 78705 / 512-323-0708
Did you notice that in Netscape 3, they moved the ``Enable Java'' and ``Enable
JavaScript'' from the SECURITY Preferences-General, to the NETWORK
Preferences-Languages. Are they implying in doing so that enabling/disabling
Java and JavaScript is no longer a security issue? Also, it was sure hard to
find, I went looking for the disable buttons the other day and finally ran
across them way at the end of Network Preferences under Languages tab. Perhaps
this is the albeit subtle indication you were looking for, that Netscape has
plugged the security holes and no longer considers Java and JavaScript a
security concern.
Gene
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
iQCVAwUBMYegds4N33uf66GRAQEcxQQApOtG/1mjuunJpYzWPsMRg4eVvv50j6Iu
jTYkW5g8zl7zcgqUmTzK6rVTN2L2kF5Us94LISXBpFTEg05Asn5UWZAB6DNE5Wzf
Ic7LjYYDQsC+1CpfnAwWp+SeaH40noDhchlEMfVf37HN+7pzmo6qMiyU9ik8vn9P
VaQh804wq2g=
=60RY
-----END PGP SIGNATURE-----
--
``Imagine if every Thursday your shoes exploded if you tied them
the usual way. This happens to us all the time with computers,
and nobody thinks of complaining.'' -Jeff Raskin
______ gene@cup.hp.com
/\__ _\ ingram@pubs.holosys.com
\/_/\ \/ ___ __ _ __ __ ___ ___
\ \ \ /' _ `\ /'_ `\/\`'__\/'__`\ /' __` __`\
\_\ \__/\ \/\ \/\ \L\ \ \ \//\ \L\.\_/\ \/\ \/\ \
/\_____\ \_\ \_\ \____ \ \_\\ \__/.\_\ \_\ \_\ \_\
\/_____/\/_/\/_/\/___L\ \/_/ \/__/\/_/\/_/\/_/\/_/
/\____/
________________________\_/__/____________________________________
PGP UserID: "Gene Ingram <gene@cup.hp.com>"
Key Size: 1024 bits; Creation date: 21 March 1996; KeyID: 9FEBA191
Key fingerprint: 93 E1 15 E6 35 BC B2 84 B2 7B 39 76 29 72 32 72
--3D signature created courtesy of ``Figlet Ascii Font Converter''
<http://mediacube.datacom.de/cgi-bin/moniteurs/figlet>
