Java,,,Oracle

The machines we love to hate

Moderator: Wiz Feinberg

User avatar
Sonny Jenkins
Posts: 4423
Joined: 19 Sep 2000 12:01 am
Location: Texas Masonic Retirement Center,,,Arlington Tx

Java,,,Oracle

Post by Sonny Jenkins »

I keep getting pop-ups asking if I want to "trust" Oracle to download or change settings on my hard drive,,,,or update Java. Seems like I remember someone on here cautioning something about that???

Also, I've noticed lately that streaming videos on you tube etc spend a lot of time buffering,,,whereas I used to never have to wait to watch anything. Could these two be related???
Bill Waskiewicz
Posts: 229
Joined: 3 Sep 2003 12:01 am
Location: Deerfield Beach, Florida, USA

Post by Bill Waskiewicz »

Same thing here, Sonny thanks for your post.
I am using windows 7 pro, Intel i7 processor with 32GB of DDR3 memory
Bill W. :)
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Get rid of Oracle's Java if possible!

Post by Wiz Feinberg »

I strongly advise all of you to either uninstall ALL versions of Oracle Java, or at least disable it from running in your web browsers. Most end-users don't interact much with Java applets on web pages, anymore. But, some web pages do require Java support to function. This puts their users at risk.

Since the release of version 7 of the Java Virtual Machine for Windows, there is a simple way to disable Java in all web browsers, with one checkbox. This is found in the Windows Control Panel Java applet, under "Security."

Why disable Java in the browsers, but leave it on the system?

Some programs actually require Java for certain functions (like database work or interactive stuff). This is more so of business apps, than end-user software. OpenOffice still installs a way-outdated version of Java with fresh installs of OpenOffice!

If you uninstall Java and some program stops functioning properly, check for an update first. If they don't offer a non-Java update, at least make sure you have the very latest build of Java installed, and only that build.

How do I uninstall Java?

For Windows computers, go to Control Panel > (Add/Remove) Programs (Uninstall a program). Scroll down alphabetically until you see entries for Java and one after another, uninstall all of them. If you absolutely must have some Java support, uninstall all but the latest version.

How do I find out if I have Java installed and what version it might be? Where do I go to download the latest authentic version of Java?


Go to http://www.java.com. The landing page also has a link asking: "Do I have Java?" Use it to see if Java is running in your browser and if so, whether it is up to date, or not.

What is the danger of running a non-current version of Java?

Cybercriminals know about and exploit many weaknesses in Java technology, some of which go back many years. Most computer users don't even know about the existence of Java, thus they don't check for its presence, or updates to it. This leaves all of these computers running out-dated versions of Java vulnerable to scripted attacks by what are known as "exploit kits."

These exploit kits are sold or leased on the criminal underground for the sole purpose of taking over innocent people's computers to install malware, including rootkits, fake anti-virus, extortion-ware, banking Trojans, proxy servers, spam tools, Nginx mini web servers to host illicit web pages, or DDoS attack tools. Java vulnerabilities are far and away the most common mode of takeover![/u]
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
Bill Waskiewicz
Posts: 229
Joined: 3 Sep 2003 12:01 am
Location: Deerfield Beach, Florida, USA

Post by Bill Waskiewicz »

Boy that was fast!!!!
Thanks Wiz, I will give it a shot.
Bill W. :)
User avatar
Richard Sinkler
Posts: 17809
Joined: 15 Aug 1998 12:01 am
Location: aka: Rusty Strings -- Missoula, Montana

Post by Richard Sinkler »

When I go to Add/Remove Programs on my computer, I see Java 7, update 17. When I click on it, there is no button to remove it like I get if I select other programs. How do you uninstall it under those circumstances? I keep getting messages that there is a Java update, but I just keep ignoring it. Should I let it update?

Windows Xp.
Carter D10 8p/7k, Dekley S10 3p/4k C6 setup, Regal RD40 Dobro, Recording King Professional Dobro, NV400, NV112, Ibanez Gio guitar, Epiphone SG Special (open G slide and regular G tuning guitar) .

Playing for 55 years and still counting.
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

There is a link in the list of installed programs to uninstall a highlighted program. Also, right-clicking on a listed programs should bring up an option to Uninstall it.

If you do have Java installed, the Control Panel icon has an Update tab you can use to fetch the newest version. It is extremely unsafe to operate on the Internet, with an out-dated version of Java running in any browser.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

This is a follow-up to my last reply, where I strongly urged people to either uninstall Java, update Java, or prevent Java from running as a browser plug-in.

In that article I warned that an out-dated version of Java can be used to take over a computer for criminal purposes. I recommend that you all read this article to bring you up to speed about how quickly a newly patched Java vulnerability can be added to professional exploit attack kits.

Furthermore, that article exposes the fact that a huge number of enterprise computers are still running older versions of Java 6.x. These are the most at risk PCs of all, since Oracle has stopped issuing security patches for Java version 6 (except to companies paying for extended support).
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
User avatar
Richard Sinkler
Posts: 17809
Joined: 15 Aug 1998 12:01 am
Location: aka: Rusty Strings -- Missoula, Montana

Post by Richard Sinkler »

Wiz. As I stated above, when I highlight Java, I get no option to uninstall (see top pic). Other programs, when I highlight them, I get the button to remove the program. The "support" link in the Java selection doesn't give me an uninstall option either.


Image


Image
Carter D10 8p/7k, Dekley S10 3p/4k C6 setup, Regal RD40 Dobro, Recording King Professional Dobro, NV400, NV112, Ibanez Gio guitar, Epiphone SG Special (open G slide and regular G tuning guitar) .

Playing for 55 years and still counting.
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

Uninstall = Remove
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
User avatar
james sluder
Posts: 253
Joined: 10 Jan 2006 1:01 am
Location: Tennessee, USA

you tube problems

Post by james sluder »

Wiz ,,how do i uninstall you tube,,i cannot find a place to do it. Mine is really messed up & i need to get it out .

Thanks !

James.
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

Richard;
I just re-read your post about not having a remove button for Java 7. That is weird. If you have CCleaner, try using it to remove Java 7. To do this, open CCleaner, then click on the Tools button, then Uninstall. If your logged in user account is not an Administrator level account, first right click on the CCleaner icon, then left-select Run As Administrator.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Re: you tube problems

Post by Wiz Feinberg »

james sluder wrote:Wiz ,,how do i uninstall you tube,,i cannot find a place to do it. Mine is really messed up & i need to get it out .

Thanks !

James.
You don't uninstall a website. You stop visiting it.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
Dave Potter
Posts: 1565
Joined: 15 Apr 2003 12:01 am
Location: Texas

Re: you tube problems

Post by Dave Potter »

Wiz Feinberg wrote:You don't uninstall a website. You stop visiting it.
Image
J W Alexander
Posts: 359
Joined: 10 Nov 2003 1:01 am
Location: Reynoldsburg, Ohio, USA

Post by J W Alexander »

Okay Wiz et al---I've done my Java update---was running Version 6, Update 29 :whoa:

I'd like to assure myself Java is NOT running in my Chrome browser which I'll keep.

How do I do this properly?


TIA
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

J W Alexander wrote:Okay Wiz et al---I've done my Java update---was running Version 6, Update 29 :whoa:

I'd like to assure myself Java is NOT running in my Chrome browser which I'll keep.

How do I do this properly?


TIA
You can simply turn off Java running as a plug-in, in all browsers, in Windows computers. Here's how.

Open your Windows Control Panel. Select Classic View, to display all icons, rather than the few default groups. Find the Java icon and open it. Under the security tab there is a checkbox to turn off Java in web browsers. Check that box and click Apply. While in the Java control box go to the Update tab and change the frequency of checking for updates to daily or weekly.

If you really need to have Java, this at least keeps it out of your browsers. If you must have Java running in a web browser, you'll need to disable it as a plug-in in all other browsers, one at a time.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
J W Alexander
Posts: 359
Joined: 10 Nov 2003 1:01 am
Location: Reynoldsburg, Ohio, USA

Post by J W Alexander »

If its not redundant when would it be necessary or a must have situation to run Java in a browser?

What do I lose by not allowing it ever?


Thanks once again!