Topic: e621 Chat, Java, and security

Posted under e621 Tools and Applications

I get the message "Java(TM) neds you permission to run." I right-cick and un the thing, and here I'm greeted with a notification of how the "self-signed" application irc.IRCApplication is blocked by my security settings.

I ask for more information, and receive these "general exception details"

com.sun.deploy.security.BlockedException: Your security settings have blocked a self-signed application from running
at com.sun.deploy.security.SandboxSecurity.showBlockedDialog(Unknown Source)
at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.isTrustedByTrustDecider(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.getTrustedCodeSources(Unknown Source)
at com.sun.deploy.security.CPCallbackHandler$ParentCallback.strategy(Unknown Source)
at com.sun.deploy.security.CPCallbackHandler$ParentCallback.openClassPathElement(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.getJarFile(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.access$1000(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.ensureOpen(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.<init>(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$3.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at sun.plugin2.applet.Plugin2ClassLoader.findClassHelper(Unknown Source)
at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

I have no idea what this means, but I look up "unblock java application" and am referred to a help page from Java's own site . There are two solutions:
1. contact the dev/publisher of the application and refer them to these three links to ensure the app complies with Java 7 update 51 standards: 1 , 2 , 3
2. Mark it as an exception in my Java security settings

I really don't want to add it as an exception because I'd rather not have e621's url written anywhere on my computer. For, er, paranoia reasons >///< . But I think it's an important issue to address. e621, for a porn site, has really great legitimacy and stability. It even has the green lock beside it's url in chrome! I think that means it's confirmed safe! So I don't see why it's chat shouldn't be verified as safe (by being compliant to current Java guidelines).

But I'd like to see if I can get this message across before emailing [email protected]. I'd rather not though because... paranoia reasons. hahah. Also, maybe some opinions on the matter? I'd really like to use the chat, so maybe some of you can tell me if it's even any good? Has anyone else brought this issue up? Anyone else up for emailing management? Any general thoughts on the matter?

Updated by Suineder

There are addons that permit you to use IRC chats without having to use the browser, i used to talk on mIRC when i first knew dota 2 was being released while the first tournament, if i'm not mistaken you can use it as well to connect to e621's chat.

Nowadays i'm using chatzilla for firefox to connect to the IRC.

If you need the address is irc.furnet.org and the channel is #e621

Updated by anonymous

That thing is a third party client offered from furnet.org, we have no influence over that thing.

I'd also highly recommend to just grab a different irc client and then connect to furnet.org manually, the Java client sucks balls.

Updated by anonymous

Aw, that's unfortunate. I would've preferred something more elegant than having to download an addon. :( thanks for your help

Updated by anonymous

Zest said:
Aw, that's unfortunate. I would've preferred something more elegant than having to download an addon. :( thanks for your help

Did you miss the mention about the mIRC client? It's a very nifty client that doesn't use java.

Updated by anonymous

Unfortunately the reason for this is that more recent versions of Java (Java 7 Update 51+) refuse to run self-signed applets unless you specifically add the site as an exception in your Java control panel. Since having an applet signed (read: NOT self-signed) is something like $180 a year, and we don't plan on spending money on an IRC client, I may have to look for an alternative.

Updated by anonymous

Zest said:
Aw, that's unfortunate. I would've preferred something more elegant than having to download an addon. :( thanks for your help

Try mibbit. You'll need to provide the server name manually, it's not in the dropdown list.

A standalone IRC client may also be useful. mIRC was mentioned, and I hear good things about it, but it's also nagware ($20 to remove the nag screen). If you're on Linux or I believe Mac, Xchat is excellent and free. If you're on Windows, Hexchat is a free fork of Xchat, or you could try Xchat's 30 day trial ($20 for the full version). I used IceChat for several years, and it worked fine for me.

Updated by anonymous

Snowy said:
Try mibbit. You'll need to provide the server name manually, it's not in the dropdown list.

I've tried to connect with Overwolf's IRC client (which happens to be a mibbit web app). Doesn't work (look under the "Server-based (CGI) gateway" section near the bottom).

Updated by anonymous

  • 1