: Anyone have any Safari java sites working with Sierra 10.12.2


pm-r
Dec 24th, 2016, 06:45 PM
As the subject says, has anyone have any Safari java sites working with Sierra 10.12.2??


I can't seem to get any java sites to run properly even those at the "test java" google test sites.

And specifically I can't get the Bless webcam working in Sierra.
Sony Network Camera SNC-RZ25 (http://209.89.8.101/en/index.html)

Not even using a virgin tester user account works.

It works with my Mavericks but Sierra seems to have killed off some stuff with it's insistence of overprotecting the user. Even when the ULR has been added to the allow security list.

Personally I've found Sierra to be a PITA to use and trying to get everything working. Spent over a week so far and still not all stuff is working.

2011 27" 2.7GHz i5 iMac 20GB RAM.

It should work but I can't find much help on the 'net.

SINC
Dec 26th, 2016, 02:32 AM
I am using Sierra 10.12.2 on my MBP and the BLESS website is working just fine at 11:30 MST tonight as you can see by the screen shot below. No issues with Java on any site that I visit.

pm-r
Dec 26th, 2016, 01:43 PM
Thanks for the feedback SINC.

I guess like some of the other apps and stuff that wouldn't work until I did an uninstall/reinstall. I guess I'll have to try the same thing with java. Not the easiest thing to uninstall completely as I recall and probably worse with all the included Sierra user protection stuff.

I can't even get any of the normal java test sites to work.

Ah well, Mavericks still works and some parts even better that Sierra's versions, and that includes Mail's same subject message highlighting.

PS: I assume you can actually get into and view the BLESS website when you click the Enter button as shown above????

hexdiy
Dec 26th, 2016, 02:00 PM
Try entering the following IP instead of an URL (you will be avoiding running over DNS that way):
209.89.8.101:80

Also, try this Java Applet viewer from the same website:
Sony Network Camera SNC-RZ25 (http://209.89.8.101/en/JViewer.html)
or:
209.89.8.101

Moreover, I sincerely hope your ISP can already handle IP v.6 addresses.

I've tested this on my trusty old Snow Leopard MacBook, and it seems to work.

Good luck, and merry XMas!

pm-r
Dec 26th, 2016, 02:25 PM
Thanks hexdiy, but I have tried those suggestions but just can't get a working viewer if I even get the site to open.

My Sierra java problem isn't just with that site but also with the various "test java" sites.

hexdiy
Dec 26th, 2016, 02:30 PM
2 things:
Is your Gatekeeper on 'Appstore & trusted developers"; did you try turning off System Integrity Protection?

What Java version are you running.
Maybe post an Etrecheck report to find out.

Afterthought: maybe Sierra simply doesn't come with Java anymore. Can't test this here...

pm-r
Dec 26th, 2016, 02:48 PM
1. Yup

2. The latest

Afterthought: Yup, no java and no Flash with a normal Sierra install as I understand and I have disabled my SIP.

John Clay
Dec 26th, 2016, 03:07 PM
Java is a complete **** show of security and thankfully is being kicked to the curb quite rapidly these days.

If you must use it, you have to both install the latest plugin from Java/Sun directly, and then enable it in Safari under Preferences -> Security -> Plug-in Settings. Any websites you need it on should be set to Allow. Outdated or vulnerable plugins are blocked immediately by Apple.

This has nothing to do with Gatekeeper or SIP, DNS, or IPv6 (no idea how that came up...).

SINC
Dec 26th, 2016, 03:26 PM
Thanks for the feedback SINC.

I guess like some of the other apps and stuff that wouldn't work until I did an uninstall/reinstall. I guess I'll have to try the same thing with java. Not the easiest thing to uninstall completely as I recall and probably worse with all the included Sierra user protection stuff.

I can't even get any of the normal java test sites to work.

Ah well, Mavericks still works and some parts even better that Sierra's versions, and that includes Mail's same subject message highlighting.

PS: I assume you can actually get into and view the BLESS website when you click the Enter button as shown above????

Yep.

hexdiy
Dec 26th, 2016, 05:22 PM
Java is a complete **** show of security and thankfully is being kicked to the curb quite rapidly these days.

If you must use it, you have to both install the latest plugin from Java/Sun directly, and then enable it in Safari under Preferences -> Security -> Plug-in Settings. Any websites you need it on should be set to Allow. Outdated or vulnerable plugins are blocked immediately by Apple.

Interesting post, John. And I certainly do agree.

This has nothing to do with Gatekeeper or SIP, DNS, or IPv6 (no idea how that came up...).

Well, Gatekeeper and SIP are supposed to block non- code - signed pieces of software, aren't they?

Websites otherwise barred I thought might be due to DNS being blocked by some filter somewhere.

To circumvent DNS going astray, I've suggested going straight via IP (so no DNS servers or proxies).

Seeing the IP in question was IP v.6, and knowing some providers are still using IP v.4 directly, or hopping through some IP v. 4 only gear still in my country, well...

Would that be so ridiculous a line of thought?

John Clay
Dec 26th, 2016, 05:38 PM
Seeing the IP in question was IP v.6, and knowing some providers are still using IP v.4 directly, or hopping through some IP v. 4 only gear still in my country, well...

Would that be so ridiculous a line of thought?

Was it? I only see a v4 address, both on the link in the OP as well as well as the other screenshots. The firmware on that camera almost certainly doesn't support IPv6 either, given the copyright date.

Most everything that supports IPv6 also supports IPv4 as well. We're not at the point of IPv6-only devices just yet, certainly not on the infrastructure/hosting side.

hexdiy
Dec 26th, 2016, 05:41 PM
Small warning as to the security of these Sony Camaras/ Ipela software:

Sony IPELA Engine IP Cameras – SecurityFeeds (http://security.1appgroup.com/category/sony-ipela-engine-ip-cameras/)

hexdiy
Dec 26th, 2016, 05:49 PM
Was it? I only see a v4 address, both on the link in the OP as well as well as the other screenshots. The firmware on that camera almost certainly doesn't support IPv6 either, given the copyright date.

Most everything that supports IPv6 also supports IPv4 as well. We're not at the point of IPv6-only devices just yet, certainly not on the infrastructure/hosting side.

Well, I may be mistaken. But is this:
209.89.8.101:80

an IP v.6 address, or an IP v. 4 address calling on Port # 80?
If you run this number, it will get you very quickly to the Ipela website without DNS intervention.

Sorry, I'm not exactly a network specialist...

John Clay
Dec 26th, 2016, 06:14 PM
Well, I may be mistaken. But is this:
209.89.8.101:80

an IP v.6 address, or an IP v. 4 address calling on Port # 80?
If you run this number, it will get you very quickly to the Ipela website without DNS intervention.

Sorry, I'm not exactly a network specialist...

That's an IPv4 address with a specified port.

A v6 address would look like this:
2607:f8b0:4006:80e:0:0:0:2003

hexdiy
Dec 26th, 2016, 06:21 PM
Thanx, John.

Good lesson for the day...

Certainly looks like a big security problem all of a sudden, if I'm guessing right.

pm-r
Dec 26th, 2016, 06:40 PM
So can I assume that I'm the only one here having problems with java sites running properly when running macOS Sierra 10.12.2 ???

BTW: it worked when I tried using Firefox and after I ran its latest update, but I don't always use FF. Maybe I should as at least it works!!! ;)

hexdiy
Dec 26th, 2016, 06:54 PM
Hells bells, Firefox at it again eh? Running an old Java plugin still, is it, just the way it can still run Flash video?
They are playing with fire all right!

Wonder how long this will last...