{"id":3561,"date":"2013-01-21T07:00:23","date_gmt":"2013-01-21T15:00:23","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=3561"},"modified":"2013-01-21T07:00:23","modified_gmt":"2013-01-21T15:00:23","slug":"technology-java-security-under-attack","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/technology-java-security-under-attack\/","title":{"rendered":"Technology: Java Security Under Attack"},"content":{"rendered":"

The more widely used software is, the bigger the target it becomes for hackers. \u00a0In the same way that Microsoft’s IE and Adobe’s Flash have been aggressively targeted in the past, Oracle’s Java has become a popular target of hackers just for that reason. \u00a0A report from the TIOBE Programming community<\/a> finds that Java is popular — Java was tied with the C programming language as the most popular language of choice used by developers in 2012.<\/p>\n

The list of Java exploits and security flaws has multiplied of late, with many of the problems being found with the run-time version of the language used by browser plug-ins<\/a>.<\/p>\n

In early January, the discovery of two ‘zero-day’ Java exploits<\/a> were announced. \u00a0A partial patch was released shortly after the announcement of the discovery, but was criticized by some as not being sufficient to fix the problems.<\/p>\n

A little later, in mid-January, Russian security firm Kaspersky Lab announced the discovery of malwar<\/a>e they’d discovered that they believe was used as part of a campaign to steal information from high-profile diplomatic, military and government targets in as many as 39 different countries, with most of the incidents occurring in Eastern Europe, but also with targets in Western Europe and North America. \u00a0The campaign was dubbed Red October<\/a>, and some believe that it may have been going on for more than five years. \u00a0Red October was based in part on security flaws found in earlier unpatched versions of Java. \u00a0Red October affected smart phones, Cisco network equipment, removable disk drives, Outlook email databases, and FTP servers.<\/p>\n

Then, a few days later in January, word began circulating of code<\/a> being sold by hackers that could exploit another unpatched Java flaw for $5000.<\/p>\n

HD Moore<\/a>,\u00a0Metasploit project founder, commented that Oracle may need two years to fix some of the problems that have been uncovered, even if no additional problems appear. \u00a0His estimate is “based on the types of problems that have been found in Java over the last 12 months, namely sandbox escapes [achieved] by abusing reflection APIs. \u00a0These types of flaws are difficult to find and sometimes even harder to fix. Oracle has already spent a year working through these issues based on the initial Security Explorations report, but will likely need another two years to fix them completely,” according to comments made to John Leyden<\/a> of the Register.<\/div>\n
<\/div>\n
\n
<\/div>\n<\/div>\n
<\/div>\n
\n
<\/div>\n<\/div>\n
\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

The more widely used software is, the bigger the target it becomes for hackers. \u00a0In the same way that Microsoft’s IE and Adobe’s Flash have been aggressively targeted in the past, Oracle’s Java has become a popular target of hackers…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[],"class_list":["post-3561","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/3561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=3561"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/3561\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=3561"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=3561"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=3561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}