Java security warning?

JAG

This is what I am getting today when I try to upload pictures. Java did update itself today but not sure if that would cause a problem. Is this really because something was tampered with? When I clicked on yes I get an error and the details of the error are the text below this screenshot. Any help? It was working fine yesterday.:scratch



Java Plug-in 1.6.0_19
Using JRE version 1.6.0_19-b04 Java HotSpot(TM) Client VM
User home directory = C:\Users\Joyce

---

c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
q: hide console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to <n>

---

java.lang.reflect.InvocationTargetException
at com.sun.deploy.util.DeployAWTUtil.invokeAndWait(Unknown Source)
at sun.plugin2.applet.Plugin2Manager.runOnEDT(Unknown Source)
at sun.plugin2.applet.Plugin2Manager.createApplet(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.lang.SecurityException: trusted loader attempted to load sandboxed resource from http://cdn.smugmug.com/img/smugJava/json-rpc-1.0.jar
at com.sun.deploy.security.CPCallbackHandler$ParentCallback.check(Unknown Source)
at com.sun.deploy.security.CPCallbackHandler$ParentCallback.access$1400(Unknown Source)
at com.sun.deploy.security.CPCallbackHandler$ChildElement.checkResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.checkResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.getResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at sun.plugin2.applet.Plugin2ClassLoader.findClassHelper(Unknown Source)
at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Unknown Source)
at java.lang.Class.getDeclaredMethod(Unknown Source)
at java.awt.Component.isCoalesceEventsOverriden(Unknown Source)
at java.awt.Component.access$500(Unknown Source)
at java.awt.Component$3.run(Unknown Source)
at java.awt.Component$3.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.awt.Component.checkCoalescing(Unknown Source)
at java.awt.Component.<init>(Unknown Source)
at java.awt.Container.<init>(Unknown Source)
at java.awt.Panel.<init>(Unknown Source)
at java.awt.Panel.<init>(Unknown Source)
at java.applet.Applet.<init>(Unknown Source)
at javax.swing.JApplet.<init>(Unknown Source)
at uploader.UploadApplet.<init>(UploadApplet.java:48)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
at java.lang.reflect.Constructor.newInstance(Unknown Source)
at java.lang.Class.newInstance0(Unknown Source)
at java.lang.Class.newInstance(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$12.run(Unknown Source)
at java.awt.event.InvocationEvent.dispatch(Unknown Source)
at java.awt.EventQueue.dispatchEvent(Unknown Source)
at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.run(Unknown Source)
Exception: java.lang.reflect.InvocationTargetException

Allen

I get the same warning using Firefox.

Andy

Yeah, Java changed something- our cert is legit, but doesn't show that way. It's bugged internally.

JAG

Andy wrote:

Yeah, Java changed something- our cert is legit, but doesn't show that way. It's bugged internally.

So how do I upload images now? Will it be fixed?

Andy

Just say "no" to the 'block' question there. It's safe to allow our uploader even though Java says no. Of course we'll fix it - that's why I said we have it bugged internally

Promise.

JAG

Andy wrote:

Just say "no" to the 'block' question there. It's safe to allow our uploader even though Java says no. Of course we'll fix it - that's why I said we have it bugged internally

Promise.

Ok thanks, that seems to have worked.

Synapped

Do you know if there is a way to turn off that warning so it doesn't pop up every time I want to upload an image?

Andy

This should be all fixed on the live site. Let us know if you encounter the security warning again. Thanks!

JAG

I did just an hour ago. It comes up every time.

Sheaf

JAG wrote:

I did just an hour ago. It comes up every time.

We think we fixed the issue less than an hour ago. Can you try again when you get a chance?

ghealy

Sheaf wrote:

We think we fixed the issue less than an hour ago. Can you try again when you get a chance?

FWIW, I uploaded to day and still received the warning.

JAG

Sheaf wrote:

We think we fixed the issue less than an hour ago. Can you try again when you get a chance?

Yes just tried it and still getting it. Also today my gallery is loading really slow and having red x thumbs on the galleries page.

jfriend

JAG wrote:

Yes just tried it and still getting it. Also today my gallery is loading really slow and having red x thumbs on the galleries page.

You have a different problem. Your problem is caused by a script error in your top javascript. To fix it, in your top javascript, replace this:

----------------------------------------------------
// Start of script to add a menu item to the buy button
//----------------------------------------------------
YE.onContentReady("buyButton", function ()

with this:

[COLOR=red]//[/COLOR]----------------------------------------------------
// Start of script to add a menu item to the buy button
//----------------------------------------------------
YE.onContentReady("buyButton", function ()

JAG

ok thanks john. I did add what you said was missing and that fixed the problem of the page saying it was done downloading with errors...but it did not fix the security messege when I try to upload pics.

I am also still having problems with a black background on my slideshow on the front page...it use to be white and it all the sudden changed to black and now it won't go back to my white theme. Even though I have the slideshow set for white in the slideshow tools. Is that something I have to do a customization on too? I do not know why these changes are happening in my code. I don't like to mess with it.

rainforest1155

JAG wrote:

Yes just tried it and still getting it. Also today my gallery is loading really slow and having red x thumbs on the galleries page.

Regarding the JAVA security warning, make sure you update to Java update 20. That fixed the warning for me on Windows 7.

Sebastian

JAG

rainforest1155 wrote:

Regarding the JAVA security warning, make sure you update to Java update 20. That fixed the warning for me on Windows 7.

Sebastian

I just looked and then updated the Java to 20 and then rebooted. I still am having the java security warning.

Andy

JAG wrote:

I just looked and then updated the Java to 20 and then rebooted. I still am having the java security warning.

Hm, something's up - we're looking into it.

Tysax

JAG wrote:

I just looked and then updated the Java to 20 and then rebooted. I still am having the java security warning.

We are aware of the problem with the security message received when using the Java 20 update and we are working on a solution. In the interim, if you answer no to the security question, you will be able to upload and future uploads should not require a response to the security question. The uploader is safe and there are no security issues with it.

If you have any additional questions, email us at the Smugmug help desk. help@smugmug.com

Have a great day!

Tyree
Smugmug Support Hero

JAG

Tysax wrote:

..... In the interim, if you answer no to the security question, you will be able to upload and future uploads should not require a response to the security question. .....

I get it EVERY time, even when answering NO. I can wait for you guys to fix it. I know eventually you will. Just an extra click....

Jeffro

JAG wrote:

I get it EVERY time, even when answering NO. I can wait for you guys to fix it. I know eventually you will. Just an extra click....

I've been getting it for weeks.....I'm getting tired of clicking no....my finger is almost wore out....

Seriously though, it'd be nice to see it gone.

Luc De Jaeger

It's gone here (Windows XP SP3) with FF 3.6.3. as well as with Opera 10.52 (though Smugmug does not support Opera yet).

Luc

JAG

Just checked after the last set of updates and fixes...still getting it.

mlee

Same here, still getting it as well.

Windows 7 Professional
Firefox 3.6.3
Java 6 Update 19 (build 1.6.0_19-b04)

Mike

ghealy

In case it helps:

Had an update to the JAVA software on May 2. Am now running:
Version 6 Update 20 (Build 1.6.0_20-b02)
OS Win 7 Pro 64 bit (Last update 2 May 2010)
Firefox 3.59

Still receiving error message regarding signed and unsigned certificates

rainforest1155

ghealy wrote: »

In case it helps:

Had an update to the JAVA software on May 2. Am now running:
Version 6 Update 20 (Build 1.6.0_20-b02)
OS Win 7 Pro 64 bit (Last update 2 May 2010)
Firefox 3.59

Still receiving error message regarding signed and unsigned certificates

Did you check it in Internet Explorer as well?
Make sure to clear your Firefox browser cache and the java cache as well. You can find the java cache in Windows Start button > control panel > java. Within the java panel, there's the cache clearing option.

Might be unrelated, but Firefox 3.6.3 has been out for quite some time. I'd recommend updating it.

Sebastian

Andy

mlee wrote: »

Same here, still getting it as well.

Windows 7 Professional
Firefox 3.6.3
Java 6 Update 19 (build 1.6.0_19-b04)

Mike

Hm. I just checked again, and on Win7 64bit I don't get the security issue - nor do I get it on WinXP (FF3.6.3 or IE). We'll check into this.

Funguyphoto

Still There...
The Java security warning is still there for me as well.

HP Envy 15, Windows 7 (64 bit), Java version 6 Update 13 (build 1.6.0_13-b03)

mlee

I upgraded to the latest Java release (Version 6 Update 20 (build 1.6.0_20-b02) and this morning it seems to be doing it every time the uploader starts now.

Windows 7 Professional (x86)
Mozilla Firefox 3.6.3



Mike

Andy

mlee wrote: »

I upgraded to the latest Java release (Version 6 Update 20 (build 1.6.0_20-b02) and this morning it seems to be doing it every time the uploader starts now.

Windows 7 Professional (x86)
Mozilla Firefox 3.6.3



Mike

We're gonna push new code this week that will fix this. We're sorry for the delay!

mlee

Andy wrote: »

We're gonna push new code this week that will fix this. We're sorry for the delay!

No worries - just wanted to make sure this was still on your radar as an issue.

Thanks, Andy.

Mike

ghealy

Just to update: As of today, I no longer receive any Java Security warnings. No changes on my end, so I figure the great team at Smugmug fixed it on their end.

Thanks, Guys & Gals.