Java - nice coffee but what about on computers

nithig · 29 Aug 2012

Java. I'm not tech.savvy enough to understand exactly what Java does or how it does it. However, it is on my computer and I wonder:

1) do I need it

2) what risks does it pose

for instance, I saw this statement on threat:
"...The best advice for users right now is to disable Java entirely as soon as possible."

So I would welcome expert comments on this topic, including what I would miss if Java was disabled.

UsernameIssues · 29 Aug 2012

Unfortunately, the term Java is used to refer to:
JavaScript
as well as Java (the programing language)
as well as Java (the virtual machine)
as well as Java (the software platform).

JavaScript poses some danger - so people use a browser like Firefox and an add-on like NoScript that allows them to select which websites they wish to trust to run JavaScript on. (At least I hope I got that info right, I've no personal experience with NoScript.)

It is the virtual machine that you should decide about. The blackhats have found many flaws in the way it runs and have been able to do some pretty nasty stuff to your computer without you ever clicking ok to anything.

My suggestion it to uninstall the Java Runtime Environment (JRE) (may show up as "Java [TM] 7 Update 5") and see if you come across any websites that you normally frequent that tell you that you must re-install it. Then you can decide if it is worth the risk.

Some say that having JRE installed is safe as long as you stay away from "bad websites" - but even "good websites" can be compromised by the blackhats.

pincushion · 30 Aug 2012

To add to the above - I have been running without Java installed for over a year but I have noticed that there were some webpages I couldn't access because of this - not a great problem but can be annoying. Also, you might have some software that relies on Java so look out for this if you do decide to remove it. The advice appears to be to remove it because of the security aspects.

Sardonicus · 30 Aug 2012

The PVR software "SageTV" won't run correctly without it. Other than that, I'm not sure what other programs use it.
Java shouldn't be confused with JavaScript, an unrelated language used to program websites.
However, if you must use Java, make sure you have the latest version.

nithig · 30 Aug 2012

thanks for the comments. I'll leave this open a little longer and see what else is contributed - perhaps
more of what will not run without JRE

x BlueRobot · 30 Aug 2012

Sardonicus said:

The PVR software "SageTV" won't run correctly without it. Other than that, I'm not sure what other programs use it.
Java shouldn't be confused with JavaScript, an unrelated language used to program websites.
However, if you must use Java, make sure you have the latest version.

I thought the latest Java version, with the updates, was how the security flaws were discovered?

Golden · 30 Aug 2012

Hi,

Some Libre Office modules require Java in order to run. See:
Java Security Risks

Regards,
Golden

UsernameIssues · 30 Aug 2012

Every app or website that I've encountered has let me know if it needs Java (JRE) installed. I keep it installed on my laptop, but not inside of my virtual machines (were I surf from quite a bit).

If you need it - then keep it. However, there are far too many people that never need it, but have it and thus are taking a risk for no benefit. I've uninstalled it from many of the people that I support and only one has asked that I put it back. He could not play bookworm.

The simplest way to know if you need it is to uninstall it - then go about your normal computing/surfing habits.

Another update to JRE came out this week :-(
Download Java Runtime Environment 1.7.0.6 (32-bit) - FileHippo.com
Download Java Runtime Environment 1.7.0.6 (64-bit) - FileHippo.com

Bummer - and another update today 1.7.0.7

Borg 386 · 30 Aug 2012

If your running FireFox, you can get an add on called QuickJava, this will allow you to enable/disable Java (& other items) with the click of a button. You can keep it disabled & should you run across a website that needs it, you can enable it for that site, then disable it again.

Allows quick enable and disable of Java, Javascript, Cookies, Image Animations, Flash, Silverlight, Images, Stylesheets and Proxy from the Statusbar and/or Toolbar.

https://addons.mozilla.org/en-US/fir...va/?src=search

nithig · 31 Aug 2012

Thank you all for the suggestions and info.
On balance my feeling is to remove runtime as I am a conservative surfer and the comments would indicate that it is not widely required.