12 responses to “Microsoft hits Java where it hurts”

1. 

   herb rubin July 31st, 2012 at 21:07

   I disabled java in firefox is that enough? or should it simply be removed from our systems?
   and if removed is there something that replaces it?

   thanks

2. 

   woody July 31st, 2012 at 22:28

   @Herb -

   If you only use Firefox for browsing, you should also disable it in Internet Explorer, and that should suffice.

3. 

   TMK July 31st, 2012 at 22:48

   I wish! Unfortunately the woefully bloated Blackberry Enterprise Server not only insists on installing both the JRE and the JDK, but outdated and therefore vulnerable versions of each. And our CEO loves his Blackberry.

4. 

   woody July 31st, 2012 at 23:19

   @TMK -

   Oy…

5. 

   old skeptic August 1st, 2012 at 02:01

   Sad story, but i will continue put JRE on client machines because every client every moment can get to the web page where jre is required….. or there maybe is alternative?

6. 

   Linda August 2nd, 2012 at 06:09

   I have windows 7 home computer. Is it ok to still have java. I use IE as my browser. Thanks.

7. 

   woody August 2nd, 2012 at 10:38

   @Linda -

   I, personally, think you’re better off moving to Chrome. It’ll ask you if you want to run Java, when necessary.

   IE 10 should be better because it has Java built into the browser. Still no experience with it, but the possibility’s there.

8. 

   Joan August 8th, 2012 at 09:22

   I have a Win 7, Office 2010 PC. This morning a new little window popped up on the side of my screen telling me that I had to update my Ms Security essentials within thirty days or I could no longer use it. THere also seemed to be some question about my Windows validation. Too bad I didn’t take a screen shot ofthe vaguely threatening little notice. So I followed instructions and found that I had to install Java, in order to have access to MSE. Also I needed to uninstall all other Java versions ( I had none) and check out some aps or something. All throuroughly confusing.

   The Java got installed.A later scan by MSE shows I updated the program earlier in the day (When I was responding to the menacing little notice).

   So is Micreosft back in bed with Java again? Have they made up their differences?

   Just wondering.

9. 

   woody August 8th, 2012 at 21:39

   @Joan -

   Not sure what you saw, but Microsoft has been blasting Java with both barrels, going as far as to give instructions for disabling Java, if you don’t need it.

   Make sure you use Secunia PSI to keep track of your Java updates. It’s a jungle out there.

10. 

    rc primak August 9th, 2012 at 13:03

    Even my Windows 8 RP has a Java Runtime for LibreOffice which still needs it. Yes, it’s an updating and security nightmare. Talk to the Document Foundation about changing over to something more secure.

    Kinda like I still need .NET for Paint .NET and little else. They really ought to think of something better to use, or integrate these features into their program.

11. 

    Mordechai (Morty) Schiller August 31st, 2012 at 02:24

    Woody, Methusellah here.
    I’m still using XP. (I also held out from DOS to Windows, and then from 3 to 95–until I got “Mom’s” book. Back then, I used to shut off Java and Active X in IE. But I found I could hardly do anything without them.)
    Do I have to worry about Java for XP? What if I keep Java updated with Secunia?
    Thanks, Morty

12. 

    woody August 31st, 2012 at 08:51

    @Meth -

    If you keep Java updated with Secunia, that’s the best you can do – without shutting down Java completely. I think there’s an added layer of protection if you use Chrome, but it isn’t clear to me if the current outbreak of really nasty Java 0days will be thwarted by Chrome.