Dusty Cables dot com

Old Java packages are still a security risk

October 1st, 2008. Published under Software Tools. No Comments.

This baffles me. Sun Microsystems, the company who produces Java, which is commonly used as a web browser plugin, occasionally offers updates to Java. These updates are almost always due to someone discovering an exploitable security hole and Sun patching that hole. This makes perfect sense and frankly is a necessity. However, what I don’t get is why Sun would then leave the old, insecure versions of Java installed. ALL of the old versions. I’ve seen Windows computers with ten or so versions of Java installed. What’s worse, malicious users who know how to exploit these security holes can easily access the older versions of Java still present, thereby defeating the entire purpose of upgrading Java to the most recent version. What’s with this, Sun?

The old versions of Java should be removed unless you know you have software that requires an older version. If that is the case, then you are stuck with the security issue as well. If not the case, which should be most people, then all of the old Java packages should be uninstalled. This used to be a tedious process using Add/Remove Programs, uninstalling one at a time. No longer!

Javara is a tiny utility that removes all old Java packages with the click of a few buttons. It logs all changes it makes as well. You can also use it to make sure you have the latest version of Java. I’ve recently discovered this utility and I now use it regularly. Go check it out and make your computer more secure!

Script telnet commands using the Telnet Scripting Tool

July 9th, 2008. Published under Software Tools. No Comments.

Recently I had need to script some telnet commands for a switch.  Googling for this led me to TST10, or the Telnet Scripting Tool v1.0 by Albert Yale.  This thing comes way back from 1997, but it works great for my needs.  I was able to script the commands I needed, so launching a batch file will make the desired changes in my switch.

It is simple to use.  Here is the configuration info copied from the executable:

Usage Syntax:

tst10.exe /r:script.txt [options]

/r:script.txt      run script.txt
[options]          any of these:

/o:output.txt      send session output to output.txt
/m                 run script in minimized window

Usage Example:

tst10.exe /r:script.txt /o:output.txt /m

Scripting Syntax:

HOSTNAME PORT      port number optional, default: 23
WAIT “string”      string to wait for
SEND “string”      string to send
\”                 represents the a quote character
\m                 represents a <CR/LF>
\\                 represents the backslash character

Scripting Example:

hostname.com 23
WAIT “login”
SEND “root\m”
WAIT “password”
SEND “mypassword\m”
WAIT “>”
SEND “dip internet.dip\m”
WAIT “>”

Scripting Note:

You can start with either WAIT or SEND commands,
but you *must* alternate them. ie: you can’t use two
or more WAIT or SEND in a row.

Note:

TST will disconnect and close as soon
as its done with the last entry of the script.

If you need to, you can type in the terminal
window while the script is running.

Very easy to use and highly recommended.  Albert’s site has been down for almost a decade according to the Wayback Machine, but you can still download it from the Wayback Machine’s archived copy.  Alternatively, you can Google for it yourself or download it from Free Downloads Center.