Java Found a program that looks like it will fit a need but it requires Java installed Is this ...

[G+_Rud Dog]

Java

Found a program that looks like it will fit a need but it requires Java installed. Is this something I should avoid or is it safe. Can't remember if this was a security risk the community recommend we stay away from?

 

Thank you for any input you may post.

[G+_Travis Hershberger]

Java should be fine. It's the web browser tie in that causes issues.

[G+_Rud Dog]

Travis Hershberger Thanks

[G+_Rud Dog]

Taking this install seriously so when I see this message in several downloads it kind of sets off alarm bells.

 

NOTE: You may need to restart (close and re-open) your browser to enable the Java installation in your browser.

[G+_Rud Dog]

Here is another reference to browser enabling.

 

[G+_Rud Dog]

This is where I ended up in my search to install Java, in case you are wondering where I am seeing these browser related items.

java.com - : Java + You

[G+_Rud Dog]

I do not want browser activation as you pointed out but there are tons of references relating to web browser functionality, how odd.

[G+_Ben Reese]

I install Java using Ninite.com. To update Java later, run the same ninite package again. I update Java, Firefox, KeePass, Audacity, 7-zip... that way. I trust Ninite more than I do the little pop-ups saying "There's a new update for Java available. Click Here to download and install."

[G+_Paul Hutchinson]

Rud Dog No need to worry, Oracle tries to activate Java in all your browsers when it installs. But all of the modern browsers block it from activating by default which is why the version verification fails. If the browser verification worked then you would need to dig into the browser's settings and disable the Java plug in.

 

Chrome & Firefox have both removed the entire NPAPI sub-system that allows things like Java to work so IIRC you can't make turn it on for those browsers even if you wanted to. Ref. https://www.java.com/en/download/faq/chrome.xml

 

The ton of references to browser functionality are hold overs from long ago when people actually needed Java to make the web dynamic and interactive.

[G+_Rud Dog]

Ben Reese Paul Hutchinson thank you feel more comfortable loading it now then I did before reading your input.

[G+_John Sullivan]

According to Leo: Java safe, Javascript not so safe

[G+_Paul Hutchinson]

cosmic Ray I've never heard Leo say that and if he did I'd bet there was some other specific conditions mentioned. Java being a far more powerful programming language than JavaScript means it has a greater capability to cause damage.

 

From Leo at http://techguylabs.com/episodes/1155/should-i-install-latest-java-update

"But he shouldn't use Java unless he needs to. If he does need to use it, he should make sure he installs all security patches. He should disable the browser plugin as well"

[G+_John Sullivan]

Paul Hutchinson hmmm ... well, that's the way I remember it ... wonder if I have it backwards? I'll have to listen more closely.

I did notice in the video that you sent a link to that Leo was talking to a caller who was running XP long after it was no longer being patched, and his advice not to use Java was not the only advice he was giving to the caller. That video was from Jan 2015, so we'll see if his advice has changed in the last three years. thanks.

[G+_Paul Hutchinson]

cosmic Ray Yeah, you may have remembered it backwards. I think I've heard him say never use Java, but to make the web work you must allow JavaScript. Which is true for all normal web users. (trying to surf the web with JavaScript disabled is a technical challenge)

[G+_Rud Dog]

Removed the program don't want to risk any problems with my PC that would be catastrophic.

[G+_Paul Hutchinson]

It's too bad you've fallen for the Java FUD :-(. It is only unsafe in browsers, on the desktop it just as safe as Python, and safer than running C/C++ based programs. BTW Python is just as unsafe in a browser as Java and C/C++ compiled code delivered through a browser is among the most unsafe of all.