Java! Uninstall It, Update it, or bend over and grab the ketchup!


Recommended Posts

Java! Uninstall It, Update it, or bend over and grab the ketchup!

For some of you, this is news!

If you have it, but don't know you explicitly really need it, please uninstall it immediately!!

Java is bad. Not by itself, but by the exploits it brings along with it. While you may have the most current version, the bad guys always seem to keep a zero day vulnerability close to their hearts!

The current version of Java (version 7) does in fact use DEP. Which should (in theory keep Vista and Windows 7 users safe, until proven it doesn't). For those of you using XP, you should come up with a really good reason why you still need java.

My mom who does stock trading. I tell her, "Please keep java updated. Only use Java with IE. The rest of the time, use Java Firefox and the Quickjava extension with Java DISABLED!"

While a lot of you love java, (I Love a cup of coffee as much as the next guy) Please take Java seriously, otherwise you may be looking down a malware infested barrel, called a rootkit infested machine!

For those of you who know and program in Java and are OK with the consequences of having it installed "More power to you!".

For the rest of the Neowin members, if you have Java, that's great, but please (for the love of god) keep it up to date, or disabled until you need it!

Walfgang Kandek, CEO of Qualys, said that the 200,000 who visited broswere security service BrowserCheck in July 2010 ? January 2011, 42% of them were running versions of plug-in Java that had not been updated and contains known vulnerabilities. Only 24% of them were older versions of Flash that include also vulnerabilities. Other applications risky because old versions are Adobe Reader (32%) and Apple QuickTime(25%).

During 2010, Oracle released several updates to address vulnerabilities Java . One last update addresses a group of 21 vulnerabilities, 8 of them considered critical. 19 of which can be exploited through a network not valid without the required login data. It is the second warning that draws attention to Java , after the December, released by Cisco, which announced that attacks through Java had surpassed the number on the Adobe Reader and Acrobat in 2010.

From that blog post:

?During the one year period starting in the third quarter of 2010 (3Q10) and ending in the second quarter of 2011 (2Q11), between one-third and one-half of all exploits observed in each quarter were Java exploits[1]. During this one year period, Microsoft antimalware technologies detected or blocked, on average, 6.9 million exploit attempts on Java related components per quarter, totaling almost 27.5 million exploit attempts during the year.?

The exploit attacks a vulnerability that exists in
Oracle Java SE JDK and JRE 7 and 6 Update 27
and earlier. If you are using
Java 6 Update 29
, or
Java 7 Update 1
, then you have
that is patched against this and 19 other security threats. If you are using a vulnerable version of Java, it?s time to update. Not sure whether you have Java or what version you may be running? Check out
, and then click the ?Do I have Java?? link below the big red ?Free Java Download? button. Apple
to fix this flaw and other Java bugs earlier this month.

What's so special about Java that it deserves its own thread? Doesn't this rule apply to any software; update it or risk getting infected.

This plus just disable Java in your browser. That's what I do since only thing I use Java for is Minecraft.

I work in information security where we have IDS's setup. We regularly see java getting owned and malware being installed even on current versions within corporate environments. On peoples home PC's..yikes...

I fricking hate Java.. I think the fundamental concepts of the language, and it being cross platform etc are excellent but like so many things to do with Oracle, it's just been horrendously implemented.

It seems to need updating on a near weekly basis and even if you turn off automatic updating, it still bugs you about updating. Not to mention how unreliable it is and the penchant it has for locking up / breaking. Hateful. I just wish it would go away and die somewhere quietly, and take Oracle with it.

Will NEVER install Suns version of this total POS software!!

The ONLY use I have really ever seen for this bloated, insecure junk is java speed tests. I simply don't run those.

The 3 most attacked (and crappiest) pieces of software ever written, IMO, are java, flash, Windows!!

I would remove it, but i can't I am a java programmer and I need it to make server applications with!! :p I would NEVER EVER use Java for desktop applications period, but for server applications its great :)

People are always asking me how to stay secure with their computers. Then I spin into the "keep Windows up to date, keep adobe up to date, adobe everything, and keep java up to date.

After their eyes stop glazing over I then walk over to the "laptop", remove java from the control panel, stop the computer from going to sleep every 20 minutes, and set Windows updates to happen at 3pm every day not 3am. Then I update Adobe and hope that they get the Adobe download that asks if you want to keep it up to date automatically. Where can I make that happen anyway? I can't seem to find that download all the time. Sometimes Adobe will provide a check mark to keep it updated automatically and sometimes it won't.

Then I put on MSE because it pretty much takes care of itself and set it to also scan once a week during the day. THEN I tell them to try and leave the computer on at 3pm every now and then to insure all the updates happen. OR do the updates manually.

Is it too much to ask the consumer to keep their computers updated to avoid getting viruses? That's the easiest question of all. YES. Warwagon knows...

I removed Java 7 and 6. I like playing dominoes and yahoo pool.

They don't work on it.

J2SE v1.5.0 is what yahoo tries to install and that works.

I wish we could have ms virtual machine which I enjoyed, but, NO.

I would remove it, but i can't I am a java programmer and I need it to make server applications with!! :p I would NEVER EVER use Java for desktop applications period, but for server applications its great :)

Wait, what? People are actually using JAVA applications on servers? Is it a heavy-load server or just a server that runs JAVA applications for some small tasks?

Wait, what? People are actually using JAVA applications on servers? Is it a heavy-load server or just a server that runs JAVA applications for some small tasks?

http://en.wikipedia.org/wiki/Java_Platform,_Enterprise_Edition

Java should be destroyed entirely. The only reason that it exists is that the .NET framework hasnt been opened to other OSs. If so, C# would **** all over it.

Uh, check out Mono. Woops, there goes your theory.

Java exists for a few very good reason, though you may not be aware of them.

Is it too much to ask the consumer to keep their computers updated to avoid getting viruses? That's the easiest question of all. YES. Warwagon knows...

I think ANYBODY who's worked in the repair industry knows - it's impossible :p

Wait, what? People are actually using JAVA applications on servers? Is it a heavy-load server or just a server that runs JAVA applications for some small tasks?

There are servers that actually run on Java, yes. Depending on the situation, it can make a lot of sense.

http://en.wikipedia....avaServer_Pages

http://en.wikipedia.org/wiki/Sun_Java_System_Web_Server

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Qualcomm takes on NVIDIA with new Dragonfly CPU and AI chips by Pradeep Viswanathan Microsoft, Google, Amazon, AMD, Meta, Apple, OpenAI, and several others have been developing their own chips for AI infrastructure. However, NVIDIA still remains the dominant player in the market. Today, Qualcomm announced a major expansion of its data center infrastructure portfolio to better compete with NVIDIA. The new lineup includes the Qualcomm Dragonfly C1000 CPU, Qualcomm High Bandwidth Compute technology, the Dragonfly AI300 inference accelerator, new connectivity products, and custom silicon solutions. Qualcomm claims that this new lineup improves performance per watt, token throughput, and total cost of ownership for AI data centers. The Dragonfly C1000 is a new data center CPU built with Qualcomm’s custom Oryon cores. This chip will feature more than 250 cores, frequencies above 5GHz, and a chiplet-based design. Qualcomm claims that this new C1000 can deliver more than 2x better performance per watt compared to existing server CPU offerings based on specifications. The Dragonfly C1000 will support PCIe Gen 7 with more than 2TB/s of connectivity, along with CXL, advanced RAS features, and both air and liquid cooling. Qualcomm expects the Dragonfly C1000 to be commercially available in 2028. Additionally, Qualcomm and Meta announced a multi-year, multi-generation agreement under which Qualcomm will supply Dragonfly C1000 data center CPUs for Meta’s next-generation server fleet. Qualcomm also announced High Bandwidth Compute, a new near-memory computing architecture designed to address AI’s memory bandwidth bottleneck. HBC Gen 1 will debut with the Dragonfly AI250, which is expected to sample in mid-2027. The AI250 will deliver 133TB/s per card, an 18x increase in effective memory bandwidth compared to the AI200 with LPDDR5X. The new Dragonfly AI300 with HBC Gen 2 is a rack-level AI inference platform from Qualcomm. Qualcomm claims that the AI300 can deliver 4x to 8x better performance per watt compared to existing GPU-based architectures based on memory bandwidth per watt per card. The Dragonfly AI300 is expected to be available in 2028.
    • IBM reveals sub-1nm chip technology, production expected in another 5 years by Pradeep Viswanathan TSMC is now leading the chip manufacturing industry with its 2nm-class process node called N2. Samsung Foundry also has a 2nm-class process node called SF2. TSMC says N2 entered volume production in Q4 2025. Samsung says SF2 started mass production in 2025. Today, IBM announced the world’s first sub-1-nanometer chip technology, marking another major semiconductor research milestone. The new technology is based on a 0.7nm, or 7-angstrom, node and uses a new transistor architecture called “nanostack.” The new design vertically stacks and staggers nanosheet-based transistors so that more components can fit into the same chip area while also improving performance and power efficiency. IBM claims that this new sub-1nm chip can pack nearly 100 billion transistors onto a chip the size of a fingernail. This offers almost twice the density, up to 50 percent higher performance, or 70 percent better energy efficiency when compared to IBM's 2nm node design announced back in 2021. Also, IBM mentioned that this new architecture can deliver 40 percent SRAM scaling. It is important to consider that this announcement from IBM is a research milestone rather than a near-term process node launch. Back in 2021, IBM unveiled the world’s first 2nm chip design, claiming 50 billion transistors on a fingernail-sized chip and major performance and efficiency gains. Five years later, IBM’s 2nm technology has still not entered mainstream commercial production. That is because IBM is no longer a major commercial chip manufacturer. It sold its chip manufacturing business to GlobalFoundries years ago and has since then focused only on semiconductor research, IP development, and partnerships. To productize its 2-nm chip technology, IBM partnered with Japan’s Rapidus, but it has not resulted in anything shipping at scale. IBM says that its new sub-1nm technology can reach production as early as within the next five years. If that happens, it will likely depend on manufacturing partners, advanced EUV tooling, and years of yield improvements.
  • Recent Achievements

    • Week One Done
      Meta Plast earned a badge
      Week One Done
    • First Post
      kinowa earned a badge
      First Post
    • Rookie
      krychek57 went up a rank
      Rookie
    • Grand Master
      Jaybonaut went up a rank
      Grand Master
    • One Year In
      Philsl earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      461
    2. 2
      +Edouard
      171
    3. 3
      PsYcHoKiLLa
      136
    4. 4
      Michael Scrip
      78
    5. 5
      Xenon
      77
  • Tell a friend

    Love Neowin? Tell a friend!