Topic: Computer tech question

Java Script Update...

Do I need it?
Is it dangerous?

I don't even like Windows Updates, so do I really need this Java Script Update?
This popup window keeps asking me to install it.

I'm obviously not a computer whiz.  Yet.

Thanks to anyone who can shed light on this for me!

Tom Paine

Re: Computer tech question

Dangerous? Not likely! from what I know, Java Script is a programming language used in websites, and even in applications. Like imbedding a uTubeVideo into a site probably uses Java or something like that.

smile

Re: Computer tech question

Yup, not dangerous.  Just an update to take advantage of changes to the JS code base.  If you don't download it you'll probably never know the difference.  It may correct some error or add some additional features.

4 (edited by sinaptix 2007-04-28 16:49:43)

Re: Computer tech question

You probably will be better off, especially if you are not a computer wiz, to keep the latest security updates for Windows including JavaScript. JavaScript can be dangerous and it has been a vector for various types of web based attacks because it is script/programming made by the website author that executes locally on your machine, so in general it is that you are trusting that each website you visit has no malicious intentions. It also happens to be very useful and in extremely widespread use on the WWW, so you can pretty much assume 90% plus of the web sites you're likely to visit employ some JavaScript in their layout/design. But because it executes locally on your machine, and most Windows users run with Admin privileges by default, it is always a potential security risk.

I run Firefox with an extension called "NoScript", it disables JavaScript execution by default and I pick and choose what to allow to run. It's less convenient, but the sites i visit regularly only need to be set once. There's also a lot of Windows applications that are internet enabled which use embedded components of Windows Explorer, which is another reason you may want to have it up to date with the latest fixes (even if you use Firefox instead of IE). In theory it should help to minimize the risk of some malicious software getting onto your system.

Edit: For example, if you want to see some advisories check this link to Security Focus site search for JavaScript. Or search FrSIRT... I dunno I'm searching right now ad hoc, not trying to scare you. In 2007 there were 9 Javascript related advisories for all platforms, that means more than just for Windows and IE. So I'm saying the threat is greater than zero, they do find bugs/secuirty problems occasionally and there are people out there who will try to come up with ways to exploit them, so it's a good idea to try and keep your system up-to-date... Okay one more linky: US-CERT United States Computer Emergency Readiness Team, another site that I think is generally trusted by computer security folks. There's also SANS Institute as another major security related site you can read advisories and stuff.

US-CERT wrote:

JavaScript - JavaScript is just one of many web scripts (other examples are VBScript, ECMAScript, and JScript) and is probably the most recognized. Used on almost every web site now, JavaScript and other scripts are popular because users expect the functionality and "look" that it provides, and it's easy to incorporate (many common software programs for building web sites have the capability to add JavaScript features with little effort or knowledge required of the user). However, because of these reasons, attackers can manipulate it to their own purposes. A popular type of attack that relies on JavaScript involves redirecting users from a legitimate web site to a malicious one that may download viruses or collect personal information.

Funny thing, the editing bar with all the buttons "MONO" "CENTER" etc for posting relies on JavaScript to work correctly smile

Okay, and I want to mention one more thing about common JavaScript out there. This part isn't a security threat per-se, but most of the sites I see now contain JavaScript for Google Analytics.

google wrote:

Google Analytics tells you everything you want to know about how your visitors found you and how they interact with your site. Focus your marketing resources on campaigns and initiatives that deliver ROI, and improve your site to convert more visitors.

which means they're collecting as much data on you and how you use their site for the sake of marketing, and when you use google, they could potentially be recording every search you input, gmail, they could have all your email... see where this is going? a big giant database about what's going on inside your head... which may or may not make you concerned, but that's valuable info to intrusive advertisers if nothing else... but fear not, google's motto is "Don't be evil".

Re: Computer tech question

It is this ?
http://www.microsoft.com/downloads/deta … laylang=en
It is an update and safe(the update)

Do not confuse JavaScript with Java from Sun http://www.java.com/en/download/index.jsp
I keep JAVA disabled and JavaScript enabled with Opera.

As long you do not use Internet Explorer and keep Opera or FireFox updated
there is no need to be afraid.

Bye, Pictus

--------------------
http://pictus.co.nr

Re: Computer tech question

Thanks everyone!  I'm going to use my NoScript option on Firefox just to be safe.
I never use IE anymore.  I never use Google, either.  I use alltheweb.com for searches.
And since I don't have a website I don't have to worry about a lot of what you mentioned.
Thanks again you guys!
TP