Cgoban being blocked in a future Java security update?

[RBerenguel]

Just wanted to say thanks for the Windows workaround. It was a success.

As for the osX workaround, well, this is the kind of restrictions you can expect with Apple products.

OS X workaround: open a terminal window, wget the .jar file, java -jar cgoban.jar Even sound works.

[Gohst]

I see the WMS post on Google+ about the fix to the Java issue but, when I download the latest CGoban, I get the one I already had (3.5.11), and it needs me to lower Java security just to be able to start it. So, I don't think WMS has posted the update just yet. I could be wrong....

If you are a Windows user and you just want to get on with your life, and play on KGS now, I would recommend the solution of temporarily lowering Java security to Medium in order to do a one-time approval of the KGS app, then increase Java security to High again. The details were posted by ErnestasRomeika in this thread.

It's an easy one-time fix, and worked fine for me.

[Marathon]

There are some threads about Java security and KGS:

• http://lifein19x19.com/forum/viewtopic.php?f=24&t=11423
• http://www.lifein19x19.com/forum/viewto ... =24&t=9870
• http://lifein19x19.com/forum/viewtopic.php?f=24&t=10876
• http://lifein19x19.com/forum/viewtopic.php?f=24&t=10180 (This thread)
• http://lifein19x19.com/forum/viewtopic.php?f=24&t=10234

. There might be others.

From recent discussions in the EGR and other rooms, I see some users are still having trouble connecting as a result of Java security issues. Coincidentally, yesterday, I was at a different computer, and, when I tried to connect to KGS, I had the same security issue. I did a little testing on that computer. I hope to do more testing later. When I do, I'll either edit this message, or add another in this thread.

The computer tested used Windows 7, with Java 1.8.0_60, and Firefox 40.0.3.

To activate the applet, I needed to have these two items in Java exception list.

• http://goserver.gokgs.com
• http://www.gokgs.com

To run the Web Start Client, I needed to add this one item in the Java exception list.

• http://files.gokgs.com

In the Java Control Panel, "General" (tab), "Network Settings" (button), I had "Direct Connection" selected. Several years ago, I was advised this is preferred over "Use Browser Settings," which is the default.

Currently, my regular computer uses Linux, with OpenJDK version of Java, with JNLP files handled by IcedTea. This will run either client without the need to enter security exceptions. I will give me one or two warnings asking if I'm sure I want to run it.

I tried the above using "https://" instead of "http://", and neither the applet nor web start clients would run. When I entered exceptions that began with "http://", Java gave me a warning, but allowed me to continue.

I said "activate", and not "run" the applet. In starting the applet, I got the pre-MOTD message, but did not get the actual MOTD. When I entered my user name and password, the rooms window did not appear. I believe this is an issue separate from the Java security issue being discussed in this thread.

The applet would not run at all using the Chrome browser. Neither will Chromium run the applet. This is the result of an separate Java issue: The plugin that allows browsers to run Java applets is based on NPAPI. Google says that NPAPI is associated with security holes, browser pages freezing, and other problems. They've withdrawn support for NPAPI. This issue is not expected to be resolved until Oracle or others who are responsible for maintaining Java create a PPAPI plugin for Java. This is also not related to the security issue in this thread.

I haven't yet tested Windows Explorer browser.

Edit: Nov. 18:
On my regular computer, which uses Linux, I switched from OpenJDK to Oracle's Java. As I said above, OpenJDK allowed me to run KGS without requiring me to enter exceptions in a list. It did give me warnings, and asked if I was sure I wanted to run the KGS software.

In switching to Oracle's Java, I found it worked exactly as it did on the Windows computer: I was required to enter security exceptions, as described above. Also, once that was done, the applet would accept my login account name and password, but the rooms window would never appear.

[wineandgolover]

PSA

I updated to the new Mac OS Sierra 10.12 and had no java problems.