Java - Understanding Why Apple Blocked Java
Java - Understanding Why Apple Blocked Java
Recently there have been several well-publicized security vulnerabilities associated with the Java browser plug-in. These vulnerabilities have all revolved around bypassing Java security mechanisms designed to restrict what “unsigned” applets or applications are able to do.
It is important to note that in these cases, Blackboard Collaborate applications themselves were not vulnerable to security threats. However, users who had Java enabled in their browser and browsed malicious websites, were.
Q: Why have Mac users had so much trouble recently with your applications?
A: Due to some recent, well-publicized security vulnerabilities, Apple has recently introduced mechanisms which can "block" some third party applications, including Java. Java is required by some of our applications.
Q: Is this blacklisting by Apple permanent?
A: No. This mechanism typically "blacklists" known vulnerable versions of Java, pending an update. In the past year, this has happened once before and Oracle has posted a Java update within a few days which addressed the vulnerabilities.
Q: Is Java insecure? Should we be worried about using it?
A: From time to time, security vulnerabilities are found in many different applications and vendors release patches to address them. By common measures, Java has been no less secure than other common software such as Flash or Browsers. Users should always employ good computing practices, such as keeping up-to-date with patches, using antivirus systems, and employing common-sense in their browsing choices.
Q: What should my users do?
A: Your users should stay up-to-date with the latest versions of Mac OS X and Java. In addition to security benefits, users on the latest versions of Mac OS X and Java are not blocked from launching Web Conferencing. As of today, there are no known security vulnerabilities for users using the latest versions.
Q: This dependence on Java has been disruptive to my users and my institution, what are you doing about it?
A: In the short term, we continue to work with Oracle and Apple to address any security concerns associated with Java. We are also building out solutions that reduce our dependency on these third party technologies over the long term.
Link to this article: http://support.blackboardcollaborate.com/ics/support/default.asp?deptID=8336&task=knowledge&questionID=2791