Updated: Java Computer Security Issue
ITS is actively following the discovery of a new computer security threat and the related warning from the Department of Homeland Security (DHS).
DHS’ Computer Emergency Readiness team is suggesting people disable Java in their web browsers. Some applications at BC require Java, therefore, ITS is not requiring all users to disable Java at this time. If ITS determines that specific action is required, we will notify the community.
This is a developing situation. Updates will be posted as soon as available. Please call the Help Center with any questions at 617-552-4357.
UPDATE: (1/16, 5:47 pm)
- This specific threat applies to Java 7.
- Many BC computers are running Java 6 and need to remain at that version to work with certain BC applications (including Kronos, Millennium, Blackboard Vista).
- If you are currently using Java 7, you can run the latest patch but please note, it has not yet been tested for compatibility with BC applications.
FINAL UPDATE (3/9/13)
Boston College has taken steps to address the ongoing issue of the Java security vulnerability, including taking preventative measures on the BC/Internet border and updating our enterprise anti-virus measures.
However, this is an ongoing issue, and there is no practical solution at this point.
If you must use Java to run certain applications, be vigilant and only visit websites that you trust.
Other steps you may be able to take to mitigate the risk are:
- Install the Firefox NoScript add-on for extra security. Learn more here.
- Unplug Java from your browser.
Barring further developments, this will be the final update on this topic.