WARNING

Moderators: Citadel Overseer, Media, Liaison Team

Post Reply
Imp334
Inactive
Posts: 859
Joined: Sun May 27, 2012 4:10 pm
RSN: Sqwire

WARNING

Post by Imp334 » Sat Jan 12, 2013 2:12 pm

http://www.cbsnews.com/8301-205_162-575 ... -software/
http://www.us-cert.gov/cas/techalerts/TA13-010A.html

There is a new java vulnerability, runescape could be affected!
Please be careful out there
Image
Proud Owner of the Quest Point Cape

User avatar
Damion
Posts: 313
Joined: Fri Sep 07, 2012 10:56 pm
RSN: Ohfaq
Location: Biloxi, MS, USA
Contact:

Re: WARNING

Post by Damion » Sat Jan 12, 2013 2:17 pm

The vulnerability has to be exploited by a programmer. In other words, for RS to be an issue, they would have to do it intentionally.
Where you really need to be careful is going to websites that you do not trust as they could upload malicious code and exploit the vulnerability in Java.
In other words, stay off the cheat code sites and porn sites and you should be okay for the most part :)
[url=http://www.facebook.com/mscoast]Add me on Facebook[/url]
[url=http://runetrack.com/profile.php?user=Ohfaq][img]http://runetrack.com/sigs/stat/blue/pose/117/Ohfaq.png[/img][/url][url=http://leetsigs.com/][img]http://advlog.leetscape.com/black/ohfaq.png[/img][/url]
[sig]2012_12_mining2.jpg[/sig][sig]2013_01_rc_3rd.jpg[/sig][sig]2013_02_wc_3rd.png[/sig]

Imp334
Inactive
Posts: 859
Joined: Sun May 27, 2012 4:10 pm
RSN: Sqwire

Re: WARNING

Post by Imp334 » Sat Jan 12, 2013 2:25 pm

They did mention that it was possible for legitimate websites to be corrupted as well if, say, Jagex were hacked by someone intending to use this
Image
Proud Owner of the Quest Point Cape

User avatar
Damion
Posts: 313
Joined: Fri Sep 07, 2012 10:56 pm
RSN: Ohfaq
Location: Biloxi, MS, USA
Contact:

Re: WARNING

Post by Damion » Sat Jan 12, 2013 2:33 pm

It is possible.
Typically when they are talking about legitimate websites being hacked and malicious code being uploaded, they are talking about sites that are on shared servers that are susceptible to these things, not company sites that have teams in place monitoring their servers constantly. Sites you need to watch out for could be blogs, info sites (those annoying ones with adsense ads all over them), sales pages, etc as most of them are put up by internet marketers that use shared servers for hundreds of sites.

Now, don't get me wrong - I am not saying it couldn't happen. But the odds of a site like Runescape getting hacked and having malicious code uploaded to the server is right up there with your chances of winning a large prize in the lotto.
[url=http://www.facebook.com/mscoast]Add me on Facebook[/url]
[url=http://runetrack.com/profile.php?user=Ohfaq][img]http://runetrack.com/sigs/stat/blue/pose/117/Ohfaq.png[/img][/url][url=http://leetsigs.com/][img]http://advlog.leetscape.com/black/ohfaq.png[/img][/url]
[sig]2012_12_mining2.jpg[/sig][sig]2013_01_rc_3rd.jpg[/sig][sig]2013_02_wc_3rd.png[/sig]

Imp334
Inactive
Posts: 859
Joined: Sun May 27, 2012 4:10 pm
RSN: Sqwire

Re: WARNING

Post by Imp334 » Sat Jan 12, 2013 2:46 pm

Oh, ok thanks a lot damion :)
So be careful out there on normal websites, but runescape should be fine :D (hopefully)
Image
Proud Owner of the Quest Point Cape

User avatar
Damion
Posts: 313
Joined: Fri Sep 07, 2012 10:56 pm
RSN: Ohfaq
Location: Biloxi, MS, USA
Contact:

Re: WARNING

Post by Damion » Sat Jan 12, 2013 3:05 pm

Yup
So, what did we learn today?
Play RS all day and go to no other websites and you should be fine :)
[url=http://www.facebook.com/mscoast]Add me on Facebook[/url]
[url=http://runetrack.com/profile.php?user=Ohfaq][img]http://runetrack.com/sigs/stat/blue/pose/117/Ohfaq.png[/img][/url][url=http://leetsigs.com/][img]http://advlog.leetscape.com/black/ohfaq.png[/img][/url]
[sig]2012_12_mining2.jpg[/sig][sig]2013_01_rc_3rd.jpg[/sig][sig]2013_02_wc_3rd.png[/sig]

User avatar
Dr Brad
KoA Alumni
KoA Alumni
Posts: 11697
Joined: Thu Jan 15, 2009 8:44 pm
RSN: Dr Brad
Location: near Washington, DC, USA
Contact:

Re: WARNING

Post by Dr Brad » Sat Jan 12, 2013 3:27 pm

Runewiki could be at risk.
Image
Image
morituri te salutant

User avatar
Oobz
Clan Member
Clan Member
Posts: 6618
Joined: Thu Mar 18, 2010 10:56 am
RSN: Oobz
Location: Pembrokeshire

Re: WARNING

Post by Oobz » Sat Jan 12, 2013 6:15 pm

Damion wrote:Yup
So, what did we learn today?
Play RS all day and go to no other websites and you should be fine :)
:lol:
Image Image

DoctorDRAG0N
KoA Alumni
KoA Alumni
Posts: 2031
Joined: Thu Oct 07, 2010 10:13 pm
RSN: DoctorDRAGON
Location: Indianapolis Indiana USA

Re: WARNING

Post by DoctorDRAG0N » Sat Jan 12, 2013 6:54 pm

Thanks for the links Imp. :)

User avatar
Sassy_Momma
Posts: 469
Joined: Wed Feb 08, 2012 11:55 pm
RSN: Sassy_Momma
Location: West Virginia

Re: WARNING

Post by Sassy_Momma » Sun Jan 13, 2013 5:26 pm

Thanks Imp
Sassy



Image
Image Image

Image

Signature
Posts: 348
Joined: Wed Oct 17, 2012 7:13 am
RSN: Signature

Re: WARNING

Post by Signature » Sun Jan 13, 2013 7:23 pm

Just to be safe, disable Java in your browsers and use the Runescape official client for the time being.

In Firefox, you go to Add-ons, then to Plugins to Java, disable it (May actually have a warning on it saying known security risk as it is).

You won't be able to run Java while browsing but can still play RS through the official client that way.


EDIT: Link to downgrading your Java to V6 (RSOF Jmod Post)
Image
Image

Post Reply