Tuesday, January 15, 2013

Homeland security says to disable Java...but we need to post grades

The US Department of Homeland Security strongly advises that Java be disabled on all computers due to a security flaw. This is one of those situations where it's really difficult to find a balance between security and usability. The district computers need to run Java, because it is required for Infinite Campus gradebooks (as well as many other programs). At the end of the semester, entering grades is obviously a really high priority. Disabling Java until a solution is found really isn't an option, unless we were to postpone the grading window.

I would suggest that Java be disabled on any computers that don't require it. I've disabled it on my home computer for the time being, and I encourage others to do the same.

Full details of the vulnerability, and instructions for disabling Java, can be found on the CERT page, which will also post updates as available.

No comments: