Bivouac.com   Discussion Page   Home     Help   Index     Login
Java Interpreter Configurations Discussion #4151
Back To Discussion List Written: 2014.01.16 by: Robin Tivy

As of 2017, Javamap was removed from the system, to simplify maintenance.

As you may know, Bivouac has two links on every mountain page: "JavaMap and ZoomMap". Both require your machine to have a Java Interpreter. This is a free download. Free Java Download. It is a "Plug In" for your browser. See Javamap Problems.

However, as of 2014, you may still have problems because your browser gives you a message like "Application Blocked by security settings". It may still work perfectly well on your machine. What I'm hoping is that YOU give the link a try and then make a posting for YOUR configuration. To describe your configuration put the following into your posting:

  - what operating system (Eg: I'm using Windows XP on a PC)
  - what browser (Eg: I'm using Firefox version 26)
  - what version of Java Interpreter (Eg: I'm using Update 51)
  - a quick summary of the situation. For example, Does not work.

If a few people make these postings, then we'll know what works and what doesn't. For example, it probably still works on a Macintosh, and still works with older versions of the Java Interpreter. Might even work with Windows 7 or Windows 8.


Comments

#1781 - 2014.05.19 Robin Tivy - Java Setup on Macbook Pro
I now have a Macbook Pro laptop in addition to my various Windows computers. This will allow me to directly document how java map works with OS-X. I am running OS-X version 10.9.2. The basic idea is to download the java plug-in (version 7 update 55), then start up the java console and put the Bivouac website onto the "exceptions" list. An important thing I didn't initially grasp was that instructions on working the Java Control Panel are identical on both the Mac and on Windows. So once you've got the plug-in loaded, you still have to go to your System Preferences and go into the Java Icon and put Bivouac on their exception list.

DETAILS
 I started by clicking on the Javamap link in Bivouac. When I tried to run the map, it told me I didn't have the necessary Plug-in. So I followed instructions, downloaded the plug-in, then installed it. The Mac asked for my MacBook password, then I answered various questions about verify, trust and run. At that point, the Java plug-in is loaded.

Then I went back to the Bivouac mountain page, and tried to run Javamap, but this time it said "Application blocked by security settings". These are the Java security settings, not Macintosh. I then looked up in Google how to fix my security settings. I found the following exhaustive description: Exhaustive description online . The preceding link contains many big screen-shots which make it hard to see the overview. Below are the actual steps, without the screen shots:


  System preferences..
  Java Icon..
  Security..
  Edit Site List..
  Add http//bivouac.com..
  Ignore the security warning about http websites..
  click OK.

#1777 - 2014.01.21 Robin Tivy - Javamaps now work with Windows XP and Java Version 51
Paul Kubik sent me an email that told me how to get Java update 51 working on my windows XP machine. So now everything is operational again. Here's a summary: In order to get Java version 51 working, you have to go to the Windows control panel, and click on "Java", then click on the Security tab, and adjust the settings. It then works with the versions of Firefox and IE that I have on my machine. (Firefox 26.0 and Internet Explorer version 8).

DETAILS

  1. Go to the regular Windows Control Panel. (Start.. Control Panel.. Java

  2. Click on "Java" application
     This brings up the Java Control Panel. The panel has five tabs on it: "General Update Java Security Advanced It also has the "about" link and some other stuff.

  3. Click on "Security"
     I then added http://bivouac.com to the list of sites. It then told me that "all http sites are considered security risks". There is also a pointer on the middle setting which is "High (minimum recommended). If you want, you can leave the pointer at High, and instead put bivouac on the exception list. In other words, you don't have to reduce the security to Medium AND add Bivouac to the site list. It would seem safer to leave the setting at High (minimum recommended) for all sites except Bivouac than to reduce it to Medium for all sites.

  4. Now try and run Javamap. It now says "Do you want to run this application? An unsigned application from the location below is requesting permission to run.
      Location: http://bivouac.com

    I said "Run" and now I see the Javamap. Once you've run one Javamap in a browser session, you can then run subsequent ones without getting the warning. It only needs to be told it is OK to run a java application from a given website once.

#1776 - 2014.01.19 Brian Buick - Windows 8 Java Config Exception Site List - Alternative Fix
Paul's fix (lowering Java security level to Medium) worked for me. I also noticed in the same window the "Exception Site List".

"Applications launched from the sites listed below will be allowed to run after the appropriate security prompts".

So I added Bivouac.com to the list and set the Java security level back to High. This also fixed the JavaMaps problem.

The first time you click on 'Draw Map' you get a window asking you to confirm but it appears once only and further map drawing does not require confirmation.

#1775 - 2014.01.19 Paul Kubik - Java security model
With Java 7 (i.e. Java 1.7 is referred to as Java 7) the security model has been "improved". What that means in practical terms is that configuration settings have to be tweaked to get Java to run inside the browser. See my previous post about Java in Windows 8.

What the industry is pushing Java users towards is to prevent users from harming their computers by running untrusted Java apps. You can probably trust Bivouac unless the server is breached somehow and a hacker installs a malicious JavaMap or ZoomMap. Currently, I can vouch for the versions of JavaMap and ZoomMap on Bivouac because I wrote and installed them. However, if someone hacked them then I cannot vouch for them.

What I've suggested to Robin is that we move Bivouac towards using secure SSL which essentially from a user's point of view is that Bivouac would be accessed using https rather than http. There is a cost associated with that and that is probably why it has not happened.

Once a secure SSL connection is established to a server, i.e. Bivouac, it is then possible for Bivouac to digitally sign its Java applications. What this means for a user is that the applications are delivered over a secure connection and there is little chance they can be tampered with. If an application is tampered it can be detected via a software checksum.

The Java 7 security model is essentially at this time giving you a warning every time you run JavaMap or ZoomMap because it has no way of verifying the publisher and ensuring the integrity of the application. So it is trying to be helpful to prevent a breach in your computer's security. Note that Java, once the security model is conformed to, will not bug you so much and prevent you from running signed applications.

You should also understand that Java applications such as JavaMap and ZoomMap are applets that run inside a restricted sandbox in Java. That means they do not have the ability to read and write to your hard drive and a bunch of other stuff like that that some malicious person might want to do. That said, there have been breaches in the past of the Java security in version 7 in which clumsy or bad programming exposed the user's computer to potential damage. So, nothing is perfect and you can't trust anyone.

Recognizing all that, I would urge Robin to migrate towards secure SSL. I think in this day and age it is required that web sites extend this level of security to their customers.

#1774 - 2014.01.19 Paul Kubik - Java running under Windows 8
I think I can help. Try reducing the default security setting for Java. Here's how.

Mouse the upper right corner of screen to bring up the Search/Start/Settings etc. popup menu.

Click Search --> Apps. Enter java in the Search Apps text box. In the Results for "java", click Configure Java. The Java Control Panel is launched. Click on the Security tab. Lower the Security level to Medium. Click OK.

That might do it. I was not logged in as an Administrator, just using my regular User account without elevated privileges.

There is one other thing about Windows 8 and it is a major deal. When you run Internet Explorer from the Start menu you will be running IE in protected mode. The Microsoft Windows 8 security model prevents Java from running at all in protected mode. You have to run IE from the Desktop in order to run Java.

#1773 - 2014.01.18 Brian Buick - Does not work with Windows 8.1 and Java 7 Update 51
I get the same error as Robin with Javamaps and Zoom maps with both Firefox and IE.

Windows 8.1

Firefox 26.0 or IE 11.0.2

Java 7 Update 51

Application Blocked by Security Settings

Name: com.nirak.javamap.Javamap

Location: http://bivouac.com

Your security settings have blocked an untrusted application from running

#1771 - 2014.01.17 Robert Ballantyne - JavaMap & ZoomMap working on iMac
I tried out both the JavaMap and the ZoomMap on Cloudburst Mountain, BC with my iMac and a Chrome browser. I am still using OS X 10.6.1 (Snow Leopard). The maps seem to be functioning as expected.

#1770 - 2014.01.17 Robin Tivy - Does not work with Apple IPad with IOS 7
Summary: Javamaps do not work because no Java plugin available for IPads.

Details: When I click on Zoommap, I get the message that the plugin is not loaded. But there is a red icon labelled "Get Java Oracle". So I clicked it, and got the familiar "Free Java Download" page, which tells me Version 7 Update 51 is available for my desktop.

Since what I am trying is an IPad, not a desktop, I clicked on other versions. But under "Mac OS X" it tells me that "Java 7 requires an intel based Mac running Mac OSX 107.3 (Lion) or later.

CONCLUSION: Java plugin is not supported on IPad.

#1769 - 2014.01.17 Robin Tivy - Still Works with XP and older version of Java
Summary: Both JavaMap links still work with Windows XP and Internet Explorer only, with the older version of the Java Interpreter. (SE 6 U39). Does not work with Firefox.

Details: Here is a description of the situation on my other Windows machine, called "Merriam". Basically it is still usable with Internet Explorer but not Firefox. It still works because I have not updated the Java Plugin, I'm still running version SE6 U (whatever that means!)

Here are the details:

WITH INTERNET EXPLORER:
 I am still able to run ZoomMap with the "outdated" Java interpreter on this machine. Also the Javamap Works.

IN FIREFOX:
  I click the link, and get the following message:

"This Plugin is vulnerable and should be updated. Activate Java (TM) Platform SE6 U. Check for updates.

So I push "check for updates". This brings up Check Your Plugins. And I under "Outdated Plugins" "Java Platform SE 6 U39"

So I click "Update Now". It tells me the recommended version is Version 7 Update 51". Which is exactly how I killed my XP machine downstairs. So I'm not going to do the update.

#1768 - 2014.01.17 Robin Tivy - Initially did not work with XP and Java 7 Update 51
Summary: When I updated my Windows XP machine called "Hector" to the latest Java Interpreter, version 51, the javamap links would no longer work with either Firefox or IE. However, I later discovered that I can fix the problem by starting up Java from the windows XP control panel and adjusting the security tab. (See a later posting, below is just a description of my initial problem).

Details:
  This machine is called "Hector". I updated to the latest version of Java, as directed. Now neither of the javamap links work on this machine. What happens is when I click the "zoom map" link, up comes "Application Blocked by Security Settings"
  Name "com.nirak.Quickloader".

Operating system: My computer is running Windows XP.

Browser: The version of Firefox I have is version 26. (You can tell what version of firefox by clicking "About" link. I think there is no newer version available for XP. The same problem exists with IE (Microsoft Internet Explorer).

Java Version:
 The version of the Java Plugin I'm using is 1.7.0_51, which is version 1.7 Update 51. (You can tell what version you are running by going to the command line and typing "java -version". It says "Java version 1.7.0_51"

Conclusion: I don't know what security settings they are talking about, or what to adjust.