1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Java Should be Disabled or Abandoned

Discussion in 'Security and Privacy' started by Arie, 2013/01/19.

  1. 2013/01/19
    Arie

    Arie Administrator Administrator Staff Thread Starter

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    When earlier this month a new flaw was discovered in Oracle’s Java, several security researchers already commented that it could well take two years to get Java fully secured.

    Last Sunday Oracle released Java 7 Update 11 to fix the specific flaw of that moment, and again several security researchers suggested that this just fixed the current issue, but left Java vulnerable.

    Yesterday security researcher Adam Gowdiak of Security Explorations wrote on the Full Disclosure mailing list that he had discovered two new security vulnerabilities in a recent version of Java SE 7 code and reported them to Oracle.

    You should consider disabling or abandoning Java. Experts argue that few websites require the Java browser plug-in at the core of so many security issues, and that users would hardly lose any functionality online without running Java.
     
    Arie,
    #1
  2. 2013/01/19
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,919
    Likes Received:
    511
    I have never had a need to install Java on my machine due to the sites that I visit don't require it.

    If I am working on a clients computer I always ask them if they use Java and if they don't then I always uninstall it. With all the news going around with Java being insecure I take the approach of just completely abandoning Java altogether. I have ran into very few websites that actually require it.

    If you don't need Java then uninstall it.
     
    Evan Omo,
    #2
    Marv6 likes this.


  3. to hide this advert.

  4. 2013/01/19
    BOBBO

    BOBBO Geek Member

    Joined:
    2002/01/07
    Messages:
    1,892
    Likes Received:
    19
    Secunia OSI is one site that wants Java working, and it has to be just the right version and installed just right.
     
    BOBBO,
    #3
  5. 2013/01/20
    SpywareDr

    SpywareDr SuperGeek WindowsBBS Team Member

    Joined:
    2005/12/31
    Messages:
    3,752
    Likes Received:
    338
    SpywareDr,
    #4
  6. 2013/01/20
    MrBill

    MrBill SuperGeek WindowsBBS Team Member

    Joined:
    2006/01/14
    Messages:
    4,331
    Likes Received:
    270
    I use the PSI one and it leaves something to be desired. Have had it at times tell me that a program or 2 is behind and it is not. Have uninstalled it and reinstalled it with the same outcome. It will show something in XP that is out of date, but fine in Win 7 and the other way around and they are the same exact version. Things like Flash or Shockwave come to mind.
     
    MrBill,
    #5
  7. 2013/01/20
    SpywareDr

    SpywareDr SuperGeek WindowsBBS Team Member

    Joined:
    2005/12/31
    Messages:
    3,752
    Likes Received:
    338
    I agree, there is no single perfect solution. It's just one more tool to try and help keep your computer, and your privacy yours.
     
    SpywareDr,
    #6
  8. 2013/01/20
    retiredlearner

    retiredlearner SuperGeek WindowsBBS Team Member

    Joined:
    2004/06/25
    Messages:
    7,214
    Likes Received:
    514
    Thanks Arie. I took your advice and uninstalled Java to be sure. (Irish in me).

    Funnily, Control Panel > Programs & Features > Right click Java > uninstall > no problems.
    There are a couple of Posts about guys having trouble uninstalling Java - I had no problems. Neil.
     
    retiredlearner,
    #7
  9. 2013/01/21
    Arie

    Arie Administrator Administrator Staff Thread Starter

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Yea, no surprise some people are having problems uninstalling Java if you look at the quality of their programming :eek:
     
    Arie,
    #8
    The WobMob likes this.
  10. 2013/02/01
    psaulm119 Lifetime Subscription

    psaulm119 Geek Member

    Joined:
    2003/12/07
    Messages:
    1,424
    Likes Received:
    21
    Wasn't the problem with Java simply the browser plugin (as opposed to an installed java program on the computer)? I thought all you had to do to take care of the security problem outlined by CERT was to disable the plugin.

    Recently I found that our bank requires it when mailing in a check online (much quicker, when you need that cash in the bank now!), so I enabled the plugin, did my stuff, then disabled it.

    But it sounds like you folks are talking about uninstalling it, not disabling a plugin.
     
    psaulm119,
    #9
  11. 2013/02/02
    Arie

    Arie Administrator Administrator Staff Thread Starter

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Most users don't need Java, so uninstalling is best.

    This vulnerability is exploited through the browser plugin, but that wouldn't stop anyone from writing another piece of malware that would bypass the browser and get to the vulnerability directly.
     
    Arie,
    #10
  12. 2013/02/02
    MrBill

    MrBill SuperGeek WindowsBBS Team Member

    Joined:
    2006/01/14
    Messages:
    4,331
    Likes Received:
    270
    If you are keeping it installed, there was an update for it yesterday. it is now 7 update 13.
     
    MrBill,
    #11
  13. 2013/02/02
    psaulm119 Lifetime Subscription

    psaulm119 Geek Member

    Joined:
    2003/12/07
    Messages:
    1,424
    Likes Received:
    21
    I understand your reasoning, although I think I'll just keep the plugin disabled for now.

    Got that update installed...
     
    psaulm119,
    #12
  14. 2013/02/11
    tallin

    tallin Well-Known Member

    Joined:
    2009/04/06
    Messages:
    179
    Likes Received:
    15
    I find I use Java on many sites I visit, banks, online email, some forums, radio streaming - I could go on so my answer to it is to do this:
    • Start
    • Control panel
    • Java
    • Security
    • Disable Java content in the browser
    I use Chrome - when I go to a link that needs Java a red cross shows on the right hand end of the address tab, click it to allow Java. I have been doing this for weeks with no issue at all with all systems working well.

    Just another way of doing it.

    kind regards,
     
    tallin,
    #13
  15. 2013/03/03
    SpywareDr

    SpywareDr SuperGeek WindowsBBS Team Member

    Joined:
    2005/12/31
    Messages:
    3,752
    Likes Received:
    338
    Another Java zero-day exploit in the wild actively attacking targets
     
    SpywareDr,
    #14
  16. 2013/03/04
    ephemarial

    ephemarial Well-Known Member

    Joined:
    2002/02/26
    Messages:
    426
    Likes Received:
    27
    Thanks for the heads up - just when I was thinking of re-enabling it -- lol.

    Need to go to several sites that require it.

    It's a pain turning it off n on.
    Just took the lazy way.
    Another browser with java enabled. I'll use it when need to go to those sites.
    Will save mouse clicks vs turning off/on in current browser.

    Will keep toes crossed that sites not compromised. (just read biography on Harry Houdini - guy claimed to untie knots with toes - working on it - failing).
     
    ephemarial,
    #15
  17. 2013/03/05
    SpywareDr

    SpywareDr SuperGeek WindowsBBS Team Member

    Joined:
    2005/12/31
    Messages:
    3,752
    Likes Received:
    338
    You're welcome. My big toes go up and down, but that's it, show's over. :)
     
    SpywareDr,
    #16

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...