Windows 8 and 8.1 Forums


How Oracle installs deceptive software with Java Updates

  1. #1


    Posts : 22,581
    64-bit Windows 10

    How Oracle installs deceptive software with Java Updates


    Oracle's Java plugin for browsers is a notoriously insecure product. Over the past 18 months, the company has released 11 updates, six of them containing critical security fixes. With each update, Java actively tries to install unwanted software. Here's what it does, and why it has to stop.

    Read more at source:
    A close look at how Oracle installs deceptive software with Java updates | ZDNet

      My System SpecsSystem Spec

  2. #2


    Posts : 419
    Windows 8.1 x64


    Eh? I've never had Java try to install anything other than Java.
      My System SpecsSystem Spec

  3. #3


    Webster NY US
    Posts : 325
    Win 7 / Win 8


    YES, thanks for sharing that Brink! The most obvious case is that you have to watch it closely as the dialog boxes go by. There's one that I think defaults to installing something other than Java and you have to uncheck it before proceeding (assuming of course you don't want it). As the article points out, they also have more veiled attempts at installing other stuff. LovingWindows, watch the dialog boxes carefully on the next update. If you're installing Oracles' standard Java environment, the unwanted stuff is in there.
      My System SpecsSystem Spec

  4. #4


    Posts : 419
    Windows 8.1 x64


    Quote Originally Posted by mbratch View Post
    If you're installing Oracles' standard Java environment, the unwanted stuff is in there.
    Java 7 Update 11 installer:

    1:
    Attachment 15265

    2:
    Attachment 15266

    3:
    Attachment 15267

    Nothing but Java installed, no extra dialogs no extra anything.
      My System SpecsSystem Spec

  5. #5


    Webster NY US
    Posts : 325
    Win 7 / Win 8


    Well... that's interesting. Mine has an extra dialog in there with a checkbox for something. It's either before #1 or between #1 and #2. I'll have to try it again tonight or tomorrow and see if I can snapshot it. Not sure what governs whether that pops up or not.
      My System SpecsSystem Spec

  6. #6


    Posts : 419
    Windows 8.1 x64


    Quote Originally Posted by mbratch View Post
    Well... that's interesting. Mine has an extra dialog in there with a checkbox for something. It's either before #1 or between #1 and #2. I'll have to try it again tonight or tomorrow and see if I can snapshot it. Not sure what governs whether that pops up or not.
    Mind you this is directly from java.com, not a third party website. I've seen third party websites before take official downloads, repack them with ad crap and put them up on their site for their viewers/readers.
      My System SpecsSystem Spec

  7. #7


    Webster NY US
    Posts : 325
    Win 7 / Win 8


    Quote Originally Posted by LovingWindows View Post
    Quote Originally Posted by mbratch View Post
    Well... that's interesting. Mine has an extra dialog in there with a checkbox for something. It's either before #1 or between #1 and #2. I'll have to try it again tonight or tomorrow and see if I can snapshot it. Not sure what governs whether that pops up or not.
    Mind you this is directly from java.com, not a third party website. I've seen third party websites before take official downloads, repack them with ad crap and put them up on their site for their viewers/readers.
    That's a good point. And I can't say for sure whether the last installer I pulled was direct from java.com. It's possible it was a hijacked installer. A lot (I mean A LOT) of those kicking around the internet. Thanks.
      My System SpecsSystem Spec

  8. #8


    Orbiting the Moon
    Posts : 2,975
    Windows 10 x64


    Quote Originally Posted by LovingWindows View Post
    Quote Originally Posted by mbratch View Post
    If you're installing Oracles' standard Java environment, the unwanted stuff is in there.
    Java 7 Update 11 installer:

    1:
    Attachment 15265

    2:
    Attachment 15266

    3:
    Attachment 15267

    Nothing but Java installed, no extra dialogs no extra anything.
    Luckily until now, I've only seen this clean setup. I always installed when offline.

    So probably when you're online, a lot of crapware, or just one it's possible to appear as options.

    I don't install Java on my host anymore: it read it became a minefield, so I sandboxed it in a VM.
      My System SpecsSystem Spec

  9. #9


    Posts : 1,353
    Windows 8 Pro/Windows 8 Pro/Windows 7 64 Bit64Bit/Windows XP


    At least the last three times I've installed Java it's tried to install 3rd party software, can't remember what, but it certainly has. Last one was only a few days ago.

    I do remember, it was the Ask Toolbar, just about everything you install has either that or the Google Toolbar.
    Last edited by BillWindows; 22 Jan 2013 at 21:47.
      My System SpecsSystem Spec

  10. #10


    Quote Originally Posted by mbratch View Post
    Quote Originally Posted by LovingWindows View Post
    Quote Originally Posted by mbratch View Post
    Well... that's interesting. Mine has an extra dialog in there with a checkbox for something. It's either before #1 or between #1 and #2. I'll have to try it again tonight or tomorrow and see if I can snapshot it. Not sure what governs whether that pops up or not.
    Mind you this is directly from java.com, not a third party website. I've seen third party websites before take official downloads, repack them with ad crap and put them up on their site for their viewers/readers.
    That's a good point. And I can't say for sure whether the last installer I pulled was direct from java.com. It's possible it was a hijacked installer. A lot (I mean A LOT) of those kicking around the internet. Thanks.
    That's a good lesson to download software only from its developers sites
      My System SpecsSystem Spec

Page 1 of 3 123 LastLast
How Oracle installs deceptive software with Java Updates
Related Threads
software updates in Chillout Room
hello. where do you look for updates to your sofware,i use majorgeeks.:)
Java Updates Should Continue to Work on Windows XP (July 14, 2014) In response to earlier reports to the contrary, Oracle's vice-president of product management in the Java Platform Group says that Java updates will be pushed out to machines running Windows XP, and that the patches should continue...
Oracle Java 7 Update 13 is Out
Read more at source: Oracle releases software update to fix Java vulnerability | Security & Privacy - CNET News
Solved Bad Software Installs in Software and Apps
Hello all, I just installed the Windows 8 Dev version 8102 and I seem to be getting a lot of software that says the computer is busy with another install (Skype) or completely errors out (iTunes 10.5). These problems started with I tried installing Windows Live Essentials. Does anyone know of...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook