Major java security flaw

[revelator]

Just wanted to warn users that the O-day exploit patch from last year did not plug up all holes in java and according to oracle it wont be fixed untill february :S security experts reccomend turning off the java plugin untill then. Most antivirus suites will not stop this exploit either so be aware.

[Spirit]

If only OpenJDK was readily available for Windows too.

[frag.machine]

As someone who write Java code for a living, I'd say if you really don't need the Java plugin, disable it. Java is a great language for corporative application development, but Oracle been sloppy on security, and this is tarnishing the technology reputation. Luckly, most of these exploits can be quickly fixed or at least workarounded on the server side.

[revelator]

oracle released an update now that should take care of it