java computer doesn't work

Sort:
RonaldJosephCote

      Are you using XP??

bleemp

I'm using Windows 8.1. I just updated to it and I thought that was the problem.

Actually, that's when I was prompted to update Java. 

RonaldJosephCote

        Read all the post in this thread; the whole conversation is way over my head.

bleemp

It's way over mine, too, trust me.

I think someone said we could try to roll back to the older version of Java, but I don't know how to do that or if it will even work.

RonaldJosephCote

      I'm running windows 7 with google chrome, and I'm not having any problems

bleemp

Interesting. I'm using Chrome, also.

I sent a message to Java support and I got this -

Thank you for taking the time to write. We will read your comments carefully and reply as soon as possible. Due to the high volume of inquiries, we must reserve our responses for questions that are not answered on the java.com website."

bleemp

I know nothing. Do any of you guys think this could be Windows update problem? 

PaulTKraly

I don't suppose the STAFF could weigh in here, could they? Laughing

RonaldJosephCote

      Jacklyn was on the thread,"I can't play live chess", about 20 mins ago.

longo2012
RonaldJosephCote wrote:

      Jacklyn was on the thread,"I can't play live chess", about 20 mins ago.

The problem, as I understand it, is the following:

Java has some security problems, that maybe they cannot solve,

Now there are a lot of "java apps" running on the most diverse operative systems (which could be android)

Since they cannot solve the security problem, they blocked all the Java Apps which have not been signed with them, demonstrating that the developer is legit, in this case chess.com

Otherwise someone could run a java app which steals data, or damage the device etc.

So maybe the problem is that chess.com must sign the app with Java, and till the moment they don't do it, it will not work. Like Chess.com many other developers in many other sites (chess tempo too) must sign their app.

locke2002

longo2012: You're about half right.

This is not a security problem with Java. This is a problem with the idea that every time you load a Java applet, a general purpose computer program, it can do anything on your computer that any other program you download can do. As we all know, you should only run programs from sources you trust. We trust Chess.com. The problem is that if Chess.com gets hacked, the hackers could replace the chess applet with a duplicate chess applet (so you don't realize anything is wrong, you can still play chess!) but that also contains a trojan payload, infecting your computer and allowing malicious abuse of your computer.

To avoid that scenario, Java is requiring that all applets be Signed. This is a common computer/internet security feature that allows your computer to compare the signature on the applet to determine if it is legitimately from Chess.com, or an imposter (to simplify things).

If Chess.com doesn't sign their applet, then you can't know it hasn't been replaced, which is why Java has been planning this transition to blocking unsigned applets for awhile. There was even a warning before that we were all acknowledging saying that the applet will be blocked in future versions of Java if it doesn't get signed, and here we are today. Java carried through with their plan, and any unsigned applets are now blocked, forcing websites to address the security vulnerability they have had ample time to prepare for.

Now, you could uninstall the recent version of Java and run an unsigned Java applet. But the preferable solution is that Chess.com signs their applet so we can be sure it hasn't been replaced with a forgery, which they are undoubtedly doing, and why I am waiting somewhat patiently.

PaulTKraly

And Chess.com probably isn't going to do that, so what are we supposed to do?

Sred
PaulTKraly wrote:

And Chess.com probably isn't going to do that, so what are we supposed to do?

Why do you think they aren't going to do that? It's the only acceptable solution, as far as I can see.

PaulTKraly

Because it'll cost them, I'd guess, about 5 cents per use?  And if there's thousands of us using it a day?  Yeah, they're NOT going to pay that. Cool

locke2002

It costs on the order of a couple hundred dollars per year. It looks like the process of getting signed up with one of the certificate authorities (Symantec, GoDaddy, etc.) takes a few days, which explains why Java implemented a warning period giving websites time to get it taken care of before blocking it entirely.

Sred
PaulTKraly wrote:

Because it'll cost them, I'd guess, about 5 cents per use?  And if there's thousands of us using it a day?  Yeah, they're NOT going to pay that.

It does not depend on the number of users. You buy the certificate and then you are fine until it expires.

Sred
locke2002 wrote:

It costs on the order of a couple hundred dollars per year. It looks like the process of getting signed up with one of the certificate authorities (Symantec, GoDaddy, etc.) takes a few days, which explains why Java implemented a warning period giving websites time to get it taken care of before blocking it entirely.

Should be quick since they obviously are already customers of a CA (they are serving https). Maybe they could even use their server certificate to sign the applet.

jaclyn

Hey guys. I'm really sorry for the java issues that have happened since the recent update. I have spoken with our team about the issue and while we are working to get the problem resolved, I can't say when exactly it will be fixed unfortuantely. The best I can do for you is offer some alternatives that we have available. 

First, if you have an Android or iOS device, we do have a free app that offers play vs computer. 

We also of course have the computers in live chess. If you're not familiar with those, please login into live chess, click on the Games tab, then click on Seeks and you should see any available computers ready for play listed there. 

If there is anything else I can help you with please let me know as usual :) 

Enjoy your weekend. 

PaulTKraly

Yes, that's helpful. Tongue Out

bleemp
jac1yn wrote:

Hey guys. I'm really sorry for the java issues that have happened since the recent update. I have spoken with our team about the issue and while we are working to get the problem resolved, I can't say when exactly it will be fixed unfortuantely. The best I can do for you is offer some alternatives that we have available. 

First, if you have an Android or iOS device, we do have a free app that offers play vs computer. 

We also of course have the computers in live chess. If you're not familiar with those, please login into live chess, click on the Games tab, then click on Seeks and you should see any available computers ready for play listed there. 

If there is anything else I can help you with please let me know as usual :) 

Enjoy your weekend. 

Thanks, Jac1yn.

It would be great if the computer games in live chess had longer time controls, like 45/45 or at least 30/0. Something tells me you guys won't be able to arrange that any time soon, though.