Re: [Rockies-Edu] Java support
Re: [Rockies-Edu] Java support
- Subject: Re: [Rockies-Edu] Java support
- From: Corey Carson <email@hidden>
- Date: Tue, 05 Feb 2013 12:20:01 -0700
Hi Lawrence,
Good questions, and I don't have all of the answers yet. I had to dig in and find this out myself, but here's the info for 10.6 - 10.8.
---
Apple maintains a list of known malicious software that is used during the safe download check to determine if a file contains malicious software. The list is stored locally, and since Security Update 2011-003 is updated daily by a background process.
If you do not wish to receive these updates, you can disable daily update by unchecking "Automatically update safe downloads list" in the Security pane, in System Preferences (under "Advanced" button in 10.7 and 10.8). This option appears in Security preferences after Security Update 2011-003 is installed.
---
This is a feature known as "X-Protect" and it's a very good one. The files that are referenced in the above pref pane are found at:
/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.plist
/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist
This is from article: http://support.apple.com/kb/HT4651?viewlocale=en_US
If you need to disable it on all of your systems, there is a sudo unload command to do that. The reason that I'm not posting it on this list is because doing so would have all systems (that used the command) exposed to any other vulnerabilities, such as those from Flash, in addition to Java.
We are waiting on official communication from Apple regarding the actions taken last week. As an alternative, you can always keep the latest version of Firefox handy to run Java-required apps and tools.
Thanks for listening, and for your patience.
Corey
Corey Carson, Systems Engineer
Apple Education
Apple Inc.
(303) 746-1634
(800) 800-2775 (Support)
www.apple.com/education/resources
On Feb 4, 2013, at 1:49 PM, "Ady, Kellie C" <email@hidden> wrote:
> I'd like to know how Apple accomplishes something like this? Is it through software update? Does Safari check in with Apple?
> Is it only if the Auto Update switch is on in Java Preferences? Obviously there is a way to get past our firewall to make something
> like this happen and I think that's of serious concern.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Rockies-edu mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden