Don’t Need Java? Junk It.

[JMH]

Don’t Need Java? Junk It.

I am often asked to recommend security software, but it’s important to remember that staying secure is just as much about removing little-used software that increases your exposure to online threats. At the very top of my nix-it-now list is Java, a powerful application that most users have on their systems but that probably few actually need.





Not only do most users have some version of Java on their systems, most Windows users likely have multiple copies of this program on their PCs, because older installers failed to remove previous, insecure versions of the software.

Worse still, Java is now among the most frequently-attacked programs, and appears to be fast replacing Adobe as the target of choice for automated exploit tools used by criminals.

Readers of the blog are no doubt familiar with my previous stories on the Eleonore Exploit Pack, a commercial software package sold by and to criminals that is used to booby trap Web sites with exploits for the most common Web browser vulnerabilities. Check out past posts on Eleonore, and it’s clear Java flaws are a key target of this increasingly common exploit pack.

Source.
Don’t Need Java? Junk It. — Krebs on Security

 

[Abhishek Ghosh]

Nice post.
Many sites uses Java Chat interface.

 

[Lebon14]

Too bad, I need Java for some software on my PC

 

[A Guy]

Good post Jan. Unfortunately, as Lebon14 mentioned, some apps require Java. You can do things to protect yourself, as with Flash and Adobe Reader, etc.

1st, I always suggest d/l and run Secunia Personal Software Inspector. It doesn't fool around, if there is a known vulnerability, even disputed, it will list it. Always read the forum posts and/or google if you think you have an up to date app version. Scans your installed programs, and advises of insecure, or end of life programs:

PSI

The next thing is Java specific. JavaRa will scan for older versions, installers, and look for updates. Nice little program:

JavaRa

A Guy

 

[Dave76]

Thanks for the info Jan.

Good point, an occasional cleanup doesn't hurt.

 

[polycue]

The next thing is Java specific. JavaRa will scan for older versions, installers, and look for updates. Nice little program:

JavaRa

A Guy

Have you used this on your windows 7 x64?

 

[A Guy]

The next thing is Java specific. JavaRa will scan for older versions, installers, and look for updates. Nice little program:

JavaRa

A Guy

Have you used this on your windows 7 x64?

Yes, I have and use this program, works just as it did on XP, no issues for me. A Guy

 

[bobtran]

Good post Jan. Unfortunately, as Lebon14 mentioned, some apps require Java. You can do things to protect yourself, as with Flash and Adobe Reader, etc.

1st, I always suggest d/l and run Secunia Personal Software Inspector. It doesn't fool around, if there is a known vulnerability, even disputed, it will list it. Always read the forum posts and/or google if you think you have an up to date app version. Scans your installed programs, and advises of insecure, or end of life programs:

PSI

The next thing is Java specific. JavaRa will scan for older versions, installers, and look for updates. Nice little program:

JavaRa

A Guy

Thanks for the tools, Didn't know about these. Figures the only issue was "Flash" and it just needed upgrading from 10 to 10.1

 

[A Guy]

Good post Jan. Unfortunately, as Lebon14 mentioned, some apps require Java. You can do things to protect yourself, as with Flash and Adobe Reader, etc.

1st, I always suggest d/l and run Secunia Personal Software Inspector. It doesn't fool around, if there is a known vulnerability, even disputed, it will list it. Always read the forum posts and/or google if you think you have an up to date app version. Scans your installed programs, and advises of insecure, or end of life programs:

PSI

The next thing is Java specific. JavaRa will scan for older versions, installers, and look for updates. Nice little program:

JavaRa

A Guy

Thanks for the tools, Didn't know about these. Figures the only issue was "Flash" and it just needed upgrading from 10 to 10.1

You are welcome, I didn't mean to hijack Jan's post, but I find them both very useful tools. Many people don't realize when you update Java, it doesn't uninstall older versions. Also, if you have programs that have their own Java exe's, PSI will alert you to those as well. A Guy

 

[swarfega]

You need java to run some programs.

 

[Fliplip]

Thanks for the heads up about JavaRa A guy, much appreciated.

 

[A Guy]

You are very welcome

A Guy