0

Java security

Las month, there was a massive security problem with Java that caused many people recommended turning off or deinstalling Java. Our IT person has had us uninstall as a precaution.

This of course causes issues with functionality with shotgun (no launching of Quicktime Versions, etc).

Do you all have any recommendations on what to do in the interim?

1 comment

  • 0
    Avatar
    Isaac Reuben

    Hey Michael,

    The recent security issues have been fixed ( http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html ) so there are currently no known java vulnerabilities.  

    That said, we're definitely looking into alternatives to using java for this, as the future of java in the browser (and somewhat even on the desktop) is in flux.  The reason we are using java now is that there is no other way to link to and open files on your local file system, which is a handy feature because it allows you to easily point to files and open them, without needing to upload them to your Shotgun server. 

    Some immediate options:

     - Reinstall the latest version of java to get that functionality back, and make sure to watch for any future updates to get them installed quickly.

     - Upload the media files to your Shotgun server instead of linking to them locally.

     - Setup an internal web server which is serving those media files, and then point to the media on that server from Shotgun (this would really only be an option if you have scripts that are creating your versions, as would be pretty cumbersome for someone to do it manually). 

    Cheers,

    - Isaac

Please sign in to leave a comment.