Security Problem with Java
 

Dear LW People

A serious vulnerability has been found in the Java applet, see for further details.

My question is this: Will this security flaw allow someone to hack into my PC when I am using LW Pro (International) or should I move over to LW Pro (English/USA), which can use different versions of Java, and avoid the security problem?


UK Bob

This security flaw only affects java applets used on websites. It has nothing to do with LimeWire. - Still, you should considering updating java if you are using java 1.4.2_05 or earlier.

Java Security Flaw
 

Cheers trap_jaw4

I use LW Pro (International), which uses Java V1.3, and at this time there is no way to get it to use later versions of Java.

I suppose you could ask why don't I use the English/USA installation of LW Pro, which is able to use any installed version of Java. The simple answer is that LW Pro (International) is stable, i.e. I have had no real problems with it, and, apart from security, I value stability above everything else.




UK Bob

Re: Java Security Flaw
 

All versions should be able to use the latest Java. If you have problems ask the developers for support you paid for it.

I never used the US version, but as far as I know the code is the same. The differences are that the international version offers other languages. In theory they should work in the same way...

Again write a mail to the developers that they can fix it if there is a bug.

Morgwen

There's been many many posts on the international vs english installers, and why the international one requires Java 1.3 right now. You can also install Java 1.4 side-by-side, and applets will use the more recent version.

Java Security Flaw
 

Dear Morgwen

I have sent many posts and had discussions with sberlin about LW Pro (International)'s inability to use anything but Java V1.3. However, when I get home tonight, I will download LW Pro V4.2.3 and re-download Java 1.4.

I'll let you know how I get on.



UK Bob

Hm, simply deleting the v1.3 JRE from the LimeWire program directory to force it to use the newer version used to work fairly well, - back in the days....

I'm just a bit curious. I installed english installer of LW 4.2.3 for windows today on somebody's comp. It asked for Java 1.3.x I stopped installation & installed 1.5 & then reinstalled LW. It didn't ask for java again. But why did it ask for Java 1.3 instead of asking for a later version or just 'Java'? Does that have something to do with minimum requirements & that's all it asks for? It also strangely happily connected despite xp firewall being on (without configuration for LW.)

Java V1.5 & LW Pro (International)
 

Dear People

I have installed LW Pro V4.2.3 (International) and I have Java V1.5 installed on my PC, trying to reinstall Java V1.4 did not entirely work because V1.5 was already there.

However, LW Pro V4.2.3 did not recognise that Java V1.5 was installed and it is only using the Java applet it downloaded with, namely V1.3.

As I said before, my main goal is to maintain stability over features because I use my PC for other important tasks, like home/internet banking, rather than just entertainment.

Saying all that, I would still like LW Pro V4.2.3 to use my latest Java installation without having the bother of deleting V1.3. But I guess this is not to be.



UK Bob

Win XP Firewall
 

Dear LOTR

I use WinXP SP1 along with Norton Personal Firewall 2003, I also use other protection software which is not relevant to this discussion.

I have turned on my XP firewall, which is not really a firewall because although it will block some things from getting into your PC it will not stop anything from getting out. I understand that the SP2 firewall works in exactly the same manner. Therefore, there is no surprise that LW can access the Internet without any configuration of XP’s (so called) firewall.

However, NPF2003 can auto or manually configure your PCs protection for both incoming and out going communications with the Internet and, in my opinion, is well worth having.



UK Bob