Need bulletins on security of Moneydance in connection with severe vulnerabilities in Java

j.williams's Avatar

j.williams

Jan 14, 2013 @ 05:15 PM

As of today all advice/direction is to "turn off Java" in the browser, and some of the guidance is garbled (e. g. Firefox's instructions). WHAT IS THE EFFECT ON MONEYDANCE, AND HOW DO WE RECOVER?

  1. 1 Posted by -Kevin N. on Jan 14, 2013 @ 05:22 PM

    -Kevin N.'s Avatar

    Hi j.williams

    Take a look at the following thread and see if it applies:
    http://help.infinitekind.com/discussions/questions/7426-will-apples...

    HTH -Kevin N.

  2. Ethan closed this discussion on Jan 14, 2013 @ 05:38 PM.

  3. j.williams re-opened this discussion on Jan 14, 2013 @ 06:23 PM

  4. 2 Posted by j.williams on Jan 14, 2013 @ 06:23 PM

    j.williams's Avatar

    On 1/14/13 12:22 PM, -Kevin N. wrote:

    That answer says:

        That security announcement only refers to the Java plugin in web
        browsers, but Moneydance uses the system Java or a bundled version
        of Java, so it's not affected by this security announcement or fix.

    If media (and governments) all over the world are reporting Java
    security compromises, you have to assert plainly in prominent/broadcast
    bulletins that Moneydance is unaffected, and why -- in detail, not just
    this brush-off.

    On my MacBook and Mini, running OS 10.5 and 10.6, does Moneydance use
    "the system Java", "a bundled version of Java" and/or a browser-based
    Java? Your answer (only "Java plugin") is meaningless even to a
    programmer, unless s/he is personally familiar your usage of Java and
    its runtime architecture.

    Bulletin: Moneydance buyers and users are not and probably never will be
    Java programmers.

  5. 3 Posted by Jon Hoover on Jan 14, 2013 @ 08:49 PM

    Jon Hoover's Avatar

    Hi,
    I am sorry we were not more explicit or thorough.
    Depending on the version of Moneydance, Moneydance uses either system Java or a bundled version of Java. It does not use browser-based Java.
    So far, we have received a very small number of queries regarding this issue. Should we notice an increase in contacting us on this we will be sure to address it in a public announcement.
    Please let us know if you have any more questions.
    Sincerely,
    Jon Hoover, Moneydance Support

  6. System closed this discussion on Mar 31, 2015 @ 03:55 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac