JMRI

[Railway42]

I don't know if this is relevant to you users of JMRI? but Java is having security problems, and is under attack. My security Emsisoft has advised that users who don't need Java should consider uninstalling it. The flaw is in the latest Java and allows bypass of Java security sandbox.

It might have nothing to do with JMRI?

Railway42

 

[craigwrdouglas]

JMRI does need Java installed on your computer to work.

It is true that there remains an outstanding un-patched vulnerability in Java, however malicious software would first have to find it's way onto your computer before it can exploit it.

The most likely way this could happen is by it being downloaded onto your computer should you visit a dodgy or infected website.

The advice I would give is to disable Java (NOT JAVASCRIPT) for your web browser (& Internet Explorer if different) if you don't need it for browsing a particular website. this should give enough protection to most users.

Craig