Are Java and JavaScript really so malicious for Windows systems?

Are Java and JavaScript really so malicious for Windows systems?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Are Java and JavaScript really so malicious for Windows systems? PeterC 11-23-2005
Posted by =?Utf-8?B?UGV0ZXJD?= on November 23, 2005, 9:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi there,

I have a huge problem in my job. Our security manager has banned Java and
JavaScript codes included via .js files to downloaded HTML or other
webbrowser enable files. He uses the firewall for this filtration. Almost 98
per cent of pages are broken down because of the incomplete pages. I am not
able to browse the web even for my professional needs. He told me that Java
applets and JavaScript are extremely dangerous especially for Windows
systems, but the Linux systems are safe.
I'd simply like to know if he is right. Thank you for correct information

Peter

Posted by Lanwench [MVP - Exchange] on November 23, 2005, 10:09 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Hi there,
>
> I have a huge problem in my job. Our security manager has banned Java and
> JavaScript codes included via .js files to downloaded HTML or other
> webbrowser enable files. He uses the firewall for this filtration. Almost
> 98
> per cent of pages are broken down because of the incomplete pages. I am
> not
> able to browse the web even for my professional needs. He told me that
> Java
> applets and JavaScript are extremely dangerous especially for Windows
> systems, but the Linux systems are safe.
> I'd simply like to know if he is right. Thank you for correct information
>
> Peter

They can be dangerous, yes. But if this is stopping you from doing your
work, perhaps he needs to come up with a better method. Banning java
outright is not really the best solution. Take this up with management.



Posted by Robert Moir on November 23, 2005, 8:03 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
PeterC wrote:
> Hi there,
>
> I have a huge problem in my job. Our security manager has banned Java
> and JavaScript codes included via .js files to downloaded HTML or
> other webbrowser enable files. He uses the firewall for this
> filtration. Almost 98 per cent of pages are broken down because of
> the incomplete pages. I am not able to browse the web even for my
> professional needs. He told me that Java applets and JavaScript are
> extremely dangerous especially for Windows systems, but the Linux
> systems are safe. I'd simply like to know if he is right. Thank you
> for correct information

In broad strokes, Java and Javascript on Windows is no where near as
dangerous as hysteriacal security managers would like them to be (but it
isn't completely "safe"). And Java on Linux is no where near as
"automagically safe just because it has a penguin on it" as hysterical
network managers would like it to be.

Oh, and remind them that Java and Javascript should have completely
different security assessments done on them. The name is the only thing that
they most have in common.


--
--
Rob Moir
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
Kazaa - Software update services for your Viruses and Spyware.



Posted by Mark Randall on November 24, 2005, 3:19 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Your security manager is incompetant and not doing his job correctly.

--
- Mark Randall
http://zetech.swehli.com

"Those people that think they know everything are a great annoyance to those
of us who do"
Isaac Asimov

> Hi there,
>
> I have a huge problem in my job. Our security manager has banned Java and
> JavaScript codes included via .js files to downloaded HTML or other
> webbrowser enable files. He uses the firewall for this filtration. Almost
> 98
> per cent of pages are broken down because of the incomplete pages. I am
> not
> able to browse the web even for my professional needs. He told me that
> Java
> applets and JavaScript are extremely dangerous especially for Windows
> systems, but the Linux systems are safe.
> I'd simply like to know if he is right. Thank you for correct information
>
> Peter



Similar ThreadsPosted
Domain Isolation and non-windows IPSec capable systems September 5, 2007, 5:56 am
Microsoft Windows Malicious Software Removal Tool July 12, 2006, 7:50 am
Event log Systems October 30, 2006, 8:56 pm
Multifunction systems March 22, 2007, 3:38 pm
How do you audit your systems? August 5, 2007, 3:18 pm
Multiple systems logged onto at once January 25, 2007, 8:46 am
JavaScript NO-Op code October 18, 2006, 12:05 pm
Patching Alpha NT Server Systems July 27, 2005, 2:52 pm
New Information Systems Security Forum May 12, 2007, 5:53 pm
De-supported Operating Systems and Security Risks January 12, 2006, 10:58 am

The site map in XML format XML site map

Contact Us | Privacy Policy