Is this java applet safe?

[Whiffy]

http://www.google.co.uk/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&docid=hlD0hJxYGcz2QM&tbnid=CKpUMs3l9GxkEM:&ved=&url=http%3A%2F%2Fwww.angryharry.com%2Fes-EMILY-MAITLIS.htm&ei=OA5TUeHJLaXV0QXCkYHgDw&bvm=bv.44342787,d.d2k&psig=AFQjCNHNvDX9v-Ngop00K4Uo_tpLxp3XTg&ust=1364484025085030

I clicked on an image in Google images. It got me to the webpage i expected but a java console window opened (as i had set) and was about to run an applet then i unplugged my ethernet before it did.

I ran mrt.exe quick scan, found nothing bad. Also put the link here
http://urlquery.net/report.php?id=1635924
http://scanurl.net/

I've got the Firefox 19 latest java 7u17 which normally asks me when about to run any java so is this a virus?

[markspace]

Post by Whiffy
I've got the Firefox 19 latest java 7u17 which normally asks me when
about to run any java so is this a virus?

Probably not. If there's no confirmation or certificate, then the
applet runs in a "sandbox," a contained environment that it can't escape
from. It can't read or write to your hard disc, inspect the registry,
contact other websites, etc.

If you go to Oracle's tutorials for Java, many applets there run without
requesting user confirmation. It's only the signed apps that need to do
something potentially dangerous that ask that you confirm it's alright
to run them.

All of the above ignores the chance of security holes and actual attacks.

[Whiffy]

Post by markspace

Post by Whiffy
I've got the Firefox 19 latest java 7u17 which normally asks me when
about to run any java so is this a virus?

Probably not. If there's no confirmation or certificate, then the
applet runs in a "sandbox," a contained environment that it can't escape
from. It can't read or write to your hard disc, inspect the registry,
contact other websites, etc.
If you go to Oracle's tutorials for Java, many applets there run without
requesting user confirmation. It's only the signed apps that need to do
something potentially dangerous that ask that you confirm it's alright
to run them.
All of the above ignores the chance of security holes and actual attacks.

With the Google link you might get 'server not found;. I just pressed refresh.

Also I had Flash disabled, which then makes it try to run Java.

[Whiffy]

Post by Whiffy

Post by markspace

Post by Whiffy
I've got the Firefox 19 latest java 7u17 which normally asks me when
about to run any java so is this a virus?

Probably not. If there's no confirmation or certificate, then the
applet runs in a "sandbox," a contained environment that it can't escape
from. It can't read or write to your hard disc, inspect the registry,
contact other websites, etc.
If you go to Oracle's tutorials for Java, many applets there run without
requesting user confirmation. It's only the signed apps that need to do
something potentially dangerous that ask that you confirm it's alright
to run them.
All of the above ignores the chance of security holes and actual attacks.

With the Google link you might get 'server not found;. I just pressed refresh.
Also I had Flash disabled, which then makes it try to run Java.

Oh i should have mentioned that my java console window pops up before the security pop-up like on http://zxspectrum.net . I had 186 tabs and my laptop was slow anyway.

I had a quick look here http://docs.oracle.com/javase/tutorial/
where are the java examples?

[Joerg Meier]

Post by Whiffy
I had a quick look here http://docs.oracle.com/javase/tutorial/
where are the java examples?

Pretty much behind every link. All of these are Java examples.

Liebe Gruesse,
Joerg

[Whiffy]

Post by Joerg Meier

Post by Whiffy
I had a quick look here http://docs.oracle.com/javase/tutorial/
where are the java examples?

Pretty much behind every link. All of these are Java examples.

No java on these pages
http://www.oracle.com/technetwork/java/javase/downloads/index.html
http://docs.oracle.com/javase/tutorial/

[Lew]

No java [sic] on these pages
http://www.oracle.com/technetwork/java/javase/downloads/index.html
http://docs.oracle.com/javase/tutorial/

Is this, from that tutorial site you just cited, not Java code?


public class ShadowTest {

public int x = 0;

class FirstLevel {

public int x = 1;

void methodInFirstLevel(int x) {
System.out.println("x = " + x);
System.out.println("this.x = " + this.x);
System.out.println("ShadowTest.this.x = " + ShadowTest.this.x);
}
}

public static void main(String... args) {
ShadowTest st = new ShadowTest();
ShadowTest.FirstLevel fl = st.new FirstLevel();
fl.methodInFirstLevel(23);
}
}

What do you mean "no java [sic]"?

That's Java!

[Whiffy]

Whiffy wrote: > No java [sic] on these pages > > http://www.oracle.com/technetwork/java/javase/downloads/index.html > http://docs.oracle.com/javase/tutorial/ Is this, from that tutorial site you just cited, not Java code? public class ShadowTest { public int x = 0; class FirstLevel { public int x = 1; void methodInFirstLevel(int x) { System.out.println("x = " + x); System.out.println("this.x = " + this.x); System.out.println("ShadowTest.this.x = " + ShadowTest.this.x); } } public static void main(String... args) { ShadowTest st = new ShadowTest(); ShadowTest.FirstLevel fl = st.new FirstLevel(); fl.methodInFirstLevel(23); } } What do you mean "no java [sic]"? That's Java! -- Lew

I have IE8 set so that a bar appears telling me that a webpage wants to run java and it doesn't on those two web pages.

http://docs.oracle.com/javase/tutorial/
http://www.oracle.com/technetwork/java/javase/downloads/index.html

Also in View Source
i search for 'public class' and it doesn't find it the phrase, so is it in some other file in your temporary internet files in the cache?

http://www.honda.co.uk/hands/
this Honda page though gets a bar saying it wants to run java but i can't see where

[Whiffy]

Post by Whiffy
http://www.honda.co.uk/hands/
this Honda page though gets a bar saying it wants to run java but i can't see where

http://www.honda.co.uk/hands/
On this Honda page on IE8 i get a bar saying

This website wants to run the following add-on: 'Java SE Runtime Environment 7 Update 25' from 'Oracle America, Inc.'. If you trust the website and the add-on and want to allow it to run, click here...

Neither Firefox or Chrome mentions java though

[Joerg Meier]

Post by Whiffy

Post by Joerg Meier

Post by Whiffy
I had a quick look here http://docs.oracle.com/javase/tutorial/
where are the java examples?

Pretty much behind every link. All of these are Java examples.

No java on these pages
http://www.oracle.com/technetwork/java/javase/downloads/index.html

That's the download location where you get Java.

Post by Whiffy
http://docs.oracle.com/javase/tutorial/

Like I said in my last post, pretty much every link on that page leads to
various Java tutorials. Just click one, like "Getting started".

A minimal level of competence is expected and required of future
programmers. I don't aim to be rude, but if you are told that a link
contains Java tutorials, you should be able to independently click a few of
those links to see the tutorials without someone holding your hand and
saying "Now click where it says 'Learning the Java language'".

If you continue to expect that level goose stepping, you won't get very
far, I'm afraid.

Liebe Gruesse,
Joerg

[John B. Matthews]

Post by Joerg Meier

Post by Whiffy

Post by Joerg Meier

Post by Whiffy
I had a quick look here http://docs.oracle.com/javase/tutorial/
where are the java examples?

Pretty much behind every link. All of these are Java examples.

No java on these pages
http://www.oracle.com/technetwork/java/javase/downloads/index.html

That's the download location where you get Java.

Post by Whiffy
http://docs.oracle.com/javase/tutorial/

Like I said in my last post, pretty much every link on that page
leads to various Java tutorials. Just click one, like "Getting
started".

As it's Easter, I'll point out easy egg: leaf pages typically have a
link to the related examples, and the section (found near the bottom of
the page) has a "name" attribute of "eg", for example

<http://docs.oracle.com/javase/tutorial/uiswing/components/list.html#eg>

As it's Passover, I'm having fried matzo.

Post by Joerg Meier
A minimal level of competence is expected and required of future
programmers. I don't aim to be rude, but if you are told that a link
contains Java tutorials, you should be able to independently click a
few of those links to see the tutorials without someone holding your
hand and saying "Now click where it says 'Learning the Java
language'".

Hear, hear. See also

<http://users.drew.edu/bburd/BeginProg2/ReadingJavadoc.pdf>

[...]