<story><title>Facebook computers compromised by zero-day Java exploit</title><url>http://arstechnica.com/security/2013/02/facebook-computers-compromised-by-zero-day-java-exploit/</url><text></text></story><parent_chain><item><author>jff</author><text>Aaaand that&apos;s why I don&apos;t have the Java plugin installed. Anywhere.&lt;p&gt;I&apos;d like to think that we&apos;re almost to the point of viewing Java in the same light as Bonzi Buddy or Comet Cursor; IT discovers you got Java on your computer again, they just sigh and re-image it, with some stern warnings to please not download such sketchy software.</text></item></parent_chain><comment><author>jlgaddis</author><text>I wish that were the case.&lt;p&gt;Large companies tend to have important enterprise applications that require Java to run and, even worse, in some cases &lt;i&gt;upgrading&lt;/i&gt; the version of Java on the user&apos;s desktop will break the application. You then end up with hundreds or thousands or users with vulnerable versions of Java on the PC that you &lt;i&gt;can&apos;t&lt;/i&gt; upgrade until the software vendor fixes whatever is wrong with their application.&lt;p&gt;I&apos;ve seen it countless times at my previous job (.edu with 1000s of staff and faculty) where we were basically helpless to do anything because absolutely critical applications would break if we upgraded Java on the desktop.&lt;p&gt;Solution: closely monitor traffic to/from user&apos;s PC&apos;s, hope for the best, and re-image when they inevitably got pwned.&lt;p&gt;Before someone chimes in with the obvious &quot;switch to a different application&quot;, it&apos;s not that easy when you have millions invested and training the user base sometimes takes &lt;i&gt;months&lt;/i&gt;.&lt;p&gt;Yeah, I hate Java.</text></comment>
<story><title>Facebook computers compromised by zero-day Java exploit</title><url>http://arstechnica.com/security/2013/02/facebook-computers-compromised-by-zero-day-java-exploit/</url><text></text></story><parent_chain><item><author>jff</author><text>Aaaand that&apos;s why I don&apos;t have the Java plugin installed. Anywhere.&lt;p&gt;I&apos;d like to think that we&apos;re almost to the point of viewing Java in the same light as Bonzi Buddy or Comet Cursor; IT discovers you got Java on your computer again, they just sigh and re-image it, with some stern warnings to please not download such sketchy software.</text></item></parent_chain><comment><author>onedev</author><text>Bonzi Buddy was my childhood computer hero....&lt;p&gt;Ahh to be 11yrs old again...</text></comment>