🚀 go-pugleaf

On Thu, 9 May 1996, Mike Bluett wrote:

> I thought this might be of interest to those that are using the WEB.

> Deadly Black Widow on the Web:
> Her Name is JAVA
> 
> "Don't trust Java online" That's the message from computer
> and Internet security watchdogs, in response to reports that
> "hostile" Java applets are stalking the WWW. These malicious
> applets can destroy data, interfere with mission critical
> intranets, and gain access to sensitive data.

A filter was recently posted to the firewalls list that prevents JAVA from
being transmitted through TIS fwtk's http-gw. See
http://www.greatcircle.com for more info on the firewalls list and its
archives.

However, Netscape 2.02 is supposed to have corrected all known flaws.
If anyone is truly concerned about JAVA security you should probably be
monitoring comp.lang.java where the real experts hang out instead of
relying on journalists who tend to have a fuzzy understanding of all
things technological.

> In light of this information, OBC feels it is prudent to
> avoid using the Netscape Navigator browsers and logging on
> to insecure Java sites on the Internet until complete safety
> can be confirmed.

MS Internet Explorer will also be supporting JAVA. Too bad, so sad. 
Anyone else notice that the same journalist earlier pointed out that
you can turn off JAVA in Netscape's Options menu? Fuzzy thinking.

> The complete Java report in the May issue of OBC also
> exposes the mounting dangers of email being attacked by
> "Trojan horse" Java applets.

Fixed in Netscape 2.01 and 2.02


Michael Dillon                                    Voice: +1-604-546-8022
Memra Software Inc.                                 Fax: +1-604-546-3049
http://www.memra.com                             E-mail: michael@memra.com