Recommended Posts

Just another non fully-automatic update that users will not install leaving gaping security holes in their system. I will continue to uninstall it until they put in some real autoupdate.

Over here even the dumbest users have been taught by everything from newspapers to banks to always click yes on the java updates. Not seeing a problem

Link to comment
Share on other sites

If I have Java 7, do I need Java 6? (like with the .net packages)

You should be able to just install Java 7 however some poorly coded apps target a specific JRE version and may require 6. What Java based apps do you need to run? If none then I would advise uninstalling Java as it is quite a popular vector for exploitation.

Link to comment
Share on other sites

Does Java 7 work with Yahoo! Games, or is it better to stick with 6? Either through the website or Yahoo! Messenger. You think they could just make it Flash based and be done with it. I think that's the only time I run Java.

Link to comment
Share on other sites

If I have Java 7, do I need Java 6? (like with the .net packages)

I do not believe they load side by side like a lot of the dot net clients. It's one or the other. Some people may need to stay at version 6 for compatibility with managing certain hardware devices or specific apps.

Link to comment
Share on other sites

yeah saw today that Java 7u9 was out as well. Also can't understand why Oracle (and before Sun) haven't made a tool yet to deploy Java in enterprise environments, making difficult to update dozens and hundreds of computers or servers. Heck, i throw Adobe in that bucket as well.

I do not believe they load side by side like a lot of the dot net clients. It's one or the other. Some people may need to stay at version 6 for compatibility with managing certain hardware devices or specific apps.

you can have Java 6 and 7 in the same machine as for loading specific apps that require a certain JRE (for example Java 6) and the rest of the apps that require a JRE (Java 7). this isn't a Java problem but poorly written code that requires a certain JRE, opening a security hole when it's the developer(s) fault.

Link to comment
Share on other sites

Also can't understand why Oracle (and before Sun) haven't made a tool yet to deploy Java in enterprise environments, making difficult to update dozens and hundreds of computers or servers. Heck, i throw Adobe in that bucket as well.

Oracle and Adobe provide MSI versions of their installers, as do most other vendors, which can be automatically installed/updated/uninstalled on managed client systems using Group Policy.

Link to comment
Share on other sites

Oracle and Adobe provide MSI versions of their installers, as do most other vendors, which can be automatically installed/updated/uninstalled on managed client systems using Group Policy.

yes but can you manage it? can you see what Java build your entire network has (without installing MOM, SC2012 or KB/inventory software)? And GP are only useful in AD/LDAP environment; if an enterprise is cloud based then it's possible that they don't even have a DC, so no AD/LDAP.

Link to comment
Share on other sites

Personally I use patchmypc. I have it setup to run every night at 3am with the patchmypc /s switch. It updates everything automatically for me. Today I woke up and I found a Adobe Reader IX on my desktop :D

Link to comment
Share on other sites

Personally I use patchmypc. I have it setup to run every night at 3am with the patchmypc /s switch. It updates everything automatically for me.

didn't knew that tool...

well while interesting it can only update one PC at a time; it would be great if it could scan a specific segment of a network, check every IP/FQDN for updates and report back, giving you the choice of which software it would update.

Link to comment
Share on other sites

yeah saw today that Java 7u9 was out as well. Also can't understand why Oracle (and before Sun) haven't made a tool yet to deploy Java in enterprise environments, making difficult to update dozens and hundreds of computers or servers. Heck, i throw Adobe in that bucket as well.

Ugh, agreed on both. However I did recently see an Adobe deployment tool... but now it seems to have disappeared since XI came out.
yes but can you manage it? can you see what Java build your entire network has (without installing MOM, SC2012 or KB/inventory software)? And GP are only useful in AD/LDAP environment; if an enterprise is cloud based then it's possible that they don't even have a DC, so no AD/LDAP.
With Group Policy I think you would just "assign" it too all PCs and have it install the latest version. You can do just updates w/ SCCM and WSUS (takes quite a bit of config for WSUS), and apparently group policy with what I was reading from Adobe - http://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/gpo.html section 8.4 seems to imply that you can do updates.
didn't knew that tool... well while interesting it can only update one PC at a time; it would be great if it could scan a specific segment of a network, check every IP/FQDN for updates and report back, giving you the choice of which software it would update.
Invent it and it'd be a 10Mill product I guarantee. Edited by cybertimber2008
Link to comment
Share on other sites

yes but can you manage it? can you see what Java build your entire network has (without installing MOM, SC2012 or KB/inventory software)? And GP are only useful in AD/LDAP environment; if an enterprise is cloud based then it's possible that they don't even have a DC, so no AD/LDAP.

Meraki has a management tool that is free and cloud-based. Also, every "real" enterprise has some kind of directory or management tool in place. They don't have an MSI, but it's easy to extract it. Much easier than Adobe Reader.

Link to comment
Share on other sites

Meraki has a management tool that is free and cloud-based. Also, every "real" enterprise has some kind of directory or management tool in place. They don't have an MSI, but it's easy to extract it. Much easier than Adobe Reader.

oh, so all the Small Business that are cloud based (meaning that they don't have a single server since it's all in the cloud) are not "real"...

LMFAO

Also WSUS has local policy but it's a real pain the butt to configure; SCCM demands licensing and it's only usefull in big IT parks; again small business won't buy that.

Invent it and it'd be a 10Mill product I guarantee.

I'm in the process of doing that (since there's no viable solution), but since my time is so sparse it's on of those projects that i'm slooowing developing (i've got a few).

That and free energy.

Link to comment
Share on other sites

Who Cares, now that Java for Mac is available on Java.Com, instead of Apple.Com, I was able to Update my Mac to Java 7 Update 9! Just FYI.

P.S. Keep in mind that I am running Mountain Lion 10.8.2 however, and that this may NOT work on earlier versions of Mac OS X like Lion and Snow Leopard for example, just like how XCode 4.5.1 is designed for Mountain Lion as well. Upgrade your systems when needed!

Link to comment
Share on other sites

Over here even the dumbest users have been taught by everything from newspapers to banks to always click yes on the java updates. Not seeing a problem

It's that kind of automatism which makes them click "Yes" when malware asks to be installed.

Link to comment
Share on other sites

Personally I use patchmypc. I have it setup to run every night at 3am with the patchmypc /s switch. It updates everything automatically for me. Today I woke up and I found a Adobe Reader IX on my desktop :D

So your patchmypc downgraded you to 9 instead of upgrading you to 11? ;)

Link to comment
Share on other sites

It's that kind of automatism which makes them click "Yes" when malware asks to be installed.

BS, users will install malware anyway, knowing to hit update is what keeps them safe, and if they answer yes to a bad thing, Norton is one of the better AV's that will in most cases keep them safe even then.

Link to comment
Share on other sites

This topic is now closed to further replies.