<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" id="owaParaStyle"></style><style type="text/css"></style><style type="text/css"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<p class="p1"><span style="font-size: 10pt;">In this issue:</span></p>
<p class="p1"><br>
</p>
<p class="p2">1. Oracle Security Patches Released</p>
<p class="p2">2. Internet Wiretapping Explained</p>
<p class="p2">3. Teaching Teens about Identity Theft</p>
<p class="p1"><br>
</p>
<p class="p1"><br>
</p>
<p class="p2">-------------------------------------------------</p>
<p class="p2">1. Oracle Security Patches Released</p>
<p class="p2">-------------------------------------------------</p>
<p class="p1"><br>
</p>
<p class="p2">Last week Oracle released its <a href="http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html">
security update for June 2013</a>, which comprises 40 security updates, with 37 of them addressing vulnerabilities that lead to malware execution. Among the updates is one that fixes a vulnerability found in
<a href="http://www.oracle.com/technetwork/java/javase/documentation/index-jsp-135444.html">
Javadoc</a>.</p>
<p class="p1"><br>
</p>
<p class="p2">Javadoc is a tool that generates frames for online documentation web apps. However, there is a vulnerability in how Javadoc interprets user supplied frames, leaving it vulnerable to frame injection when hosted on a web server. By using the vulnerable
variation, and put into a webpage, a user clicking into the frame will be going to a malicious redirection.</p>
<p class="p1"><br>
</p>
<p class="p2">The other updates address vulnerabilities in:</p>
<p class="p1"><br>
</p>
<p class="p2"><span class="Apple-tab-span"></span>•<span class="Apple-tab-span"> </span>
JDK and JRE 7, 6 and 5.0</p>
<p class="p2"><span class="Apple-tab-span"></span>•<span class="Apple-tab-span"> </span>
JavaFX 2.2.21 and earlier</p>
<p class="p1"><br>
</p>
<p class="p2">NOTE TO MIT USERS: Before installing Java updates to a computer in the MIT environment, please review this article:
<a href="http://kb.mit.edu/confluence/pages/viewpage.action?pageId=151102086">Which Java version should I install?</a></p>
<p class="p1"><br>
</p>
<p class="p1"><br>
</p>
<p class="p2">--------------------------------------------</p>
<p class="p2">2. Internet Wiretapping Explained</p>
<p class="p2">--------------------------------------------</p>
<p class="p1"><br>
</p>
<p class="p2">With the revelation of the Prism program, and with warrantless wiretapping being the topic of the day, there has been much confusion and speculation in the debates.
<a href="http://bigstory.ap.org/article/secret-prism-success-even-bigger-data-seizure">
This article from the Associated Press</a> explains in clear terms what we know, and what it means for our data.</p>
<p class="p1"><br>
</p>
<p class="p2"><a href="http://www.zdnet.com/how-did-mainstream-media-get-the-nsa-prism-story-so-hopelessly-wrong-7000016822/">This article from ZD Net</a> corrects some of the misleading stories in the mainstream media.</p>
<p class="p1"><br>
</p>
<p class="p1"><br>
</p>
<p class="p2">---------------------------------------------------</p>
<p class="p2">3. Teaching Teens about Identity Theft</p>
<p class="p2">---------------------------------------------------</p>
<p class="p1"><br>
</p>
<p class="p2">According to the Juvenile Justice Information Exchange, "kids under the age of 18 are 51 times more likely to become victims of identity theft than their parents."</p>
<p class="p1"><br>
</p>
<p class="p2">This summer teens are likely to spend a lot of time online and many of them don't think that anything can happen to them. They are much more likely to fall for a scam.</p>
<p class="p1"><br>
</p>
<p class="p2">Learn what you can do to <a href="http://moneyning.com/credit/teaching-teens-to-prevent-identity-theft/">
teach your teen about preventing identity theft</a>.</p>
<p class="p1"><br>
</p>
<p class="p1"><br>
</p>
<p class="p3">===================================================================================</p>
<p class="p3">Read all Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/">http://securityfyi.wordpress.com/</a>.</p>
<p class="p3">===================================================================================</p>
<p class="p4"><br>
</p>
<div><br>
<div style="font-family:Tahoma; font-size:13px">
<div class="BodyFragment"><font size="2">
<div class="PlainText">Monique Yeaton<br>
IT Security Communications Consultant<br>
Information Services & Technology, MIT<br>
http://ist.mit.edu/security</div>
</font></div>
</div>
</div>
</div>
</body>
</html>