Until someone more qualified comes along...

If I needed to use Java, I'd use it and not worry about it. I'd just be sure I kept it updated... like I do everything else.

You say you removed Java? Did you reinstall it sometime later? I ask because you say you're getting messages to "update" Java, which I would think must mean it's already installed. If that's true, by ignoring offers to update aren't you really ignoring offers to patch newly discovered holes?

Thanks for the response. I misspoke. The prompt says a new version of Java is ready to install. It doesn't say update.

Do you have an Internet activity that requires Java? I haven't had Java installed on my system for quite a while now.

However, I do keep the current version downloaded and stored in the Windows Download Folder in the event I might require it and time is of the essence.

DA

Java is used by hundreds of millions of people every day.

Use common sense when on the internet, use good security software and keep it and Java always updated, and don't give it a second thought.

Java historically was the vulnerable point of computers. It is suggested by many savy computer people to disable it unless you need it for programming.

I haven't uninstalled it, yet. But did disable it and still getting those pesky 'new version' messages.

Here's a link to an easy-to-understand article.

Here is a link that might be useful: http://www.pcmag.com/article2/0,2817,2414191,00.asphttp://www.pcmag.com/article2/0,2817,2414191,00.asp

Deleted. The post might have detracted from the thread more than it contributed.
DA

This post was edited by damccoy on Tue, Nov 19, 13 at 11:38

Java will never be 100% safe and the fact that poor coding (in recent updates) has opened the door to even more vulnerabilities has tattered Oracle's image and there is a general concern about their lack of commitment to keeping the product safe.

I don't know because I'm not using it but a couple times I've helped others with it and in the back of my brain I think I read something once .... Newer browser will always ask first if a page wants to use it.. So the user has the call to allow or not.

Of course most people allow everything . But it at least sheds partial responsibility to the user.

If I needed it for a game I liked I would probably use it. I removed it and haven't found a need for it. I play a lot of games but nothing online.

Here's what I tell my users on the other forums,

Special note on Java.Old Java versions should be removed after first clearing the Java Cache by following the instructions in:
http://www.java.com/...lugin_cache.xml

Then remove the old versions by going to Control Panel, Programs and Features and Uninstall all Java programs which are not Java Version 7 update 25 or better. These may call themselves: Java Runtime, Runtime Environment, Runtime, JRE, Java Virtual Machine, Virtual Machine, Java VM, JVM, VM, J2RE, J2SE. Get the latest version from Java.com. They will usually attempt to foist some garbage like the Ask toolbar, Yahoo toolbar or McAfee Security Scan on you as part of the download. Just uncheck the garbage before the download (or install) starts. If you use a 64-bit browser and want the 64-bit version of Java you need to use it to visit java.com.

Due to multiple security problems with Java we are now recommending that it not be installed unless you absolutely know you need it. If that is the case then you should go in to Control panels, Java, Security and set the slider to the highest level.

Also make sure you have the latest versions of any adobe.com products you use like Shockwave, Flash or Acrobat.

Whether you use adobe reader, acrobat or fox-it to read pdf files you need to disable Javascript in the program. There is an exploit out there now that can use it to get on your PC. For Adobe Reader: Start, All Programs, Adobe Reader, Edit, Preferences, Click on Javascript in the left column and uncheck Enable Acrobat Javascript. OK Close program. It's the same for Foxit reader except you uncheck Enable Javascript Actions.

Zep,
I'm confused. I thought Javascript and Java were two separate, unrelated things.
I use Sumatra rather than Foxit. Couldn't find any reference to Javascript.

Sumatra doesn't support java-script that's why there's nothing to disable or any reference to it.

Thanks Zep. One thing I've noticed when disabling Javascript it prevents logging in on this site. After logging in I disable it in my browser and no problems in posting.

Javascript and Java are indeed two separate and completely unrelated things.

However, some people worry that JavaScript can be abused by disreputable Web site owners, and choose to disable it.

"...some people worry that JavaScript can be abused by disreputable Web site..."

Instead they should worry about the consequences of visiting disreputable sites, not about javascript. Disabling javascript doesn't provide immunity from the dangers of visiting such sites. Careless behavior leads to unwanted consequences, on the internet as in real life.

And problems might also arise from the failure to use an adequate security system to block either the site, dangerous activity/execution, or both. That's also easy to correct.

"Instead they should worry about the consequences of visiting disreputable sites" I have heard this many times but without any answers as to what is a "reputable" site. I visit "reputable" sites many times a day and still receive unwanted junk in the form of ads -- to the extent that it slows down the computer. What I have tried in order to avoid those things is another story and have found almost all recommended solutions to be false. But perhaps getting loaded down with ads is reputable.

Indeed! Back in the early 2000s I had a Windows98 computer and was using IE. I went to an otherwise reputable site (einsiders.com) to peruse celeb obits (done by Rusty White). I had done this on numerous occasions previously, but one evening I did so, my IE started acting crazy and I ended up with links to child porn on my desktop!!! I immediately went offline, did all the scans I knew to do at the time, and, fortunately, the garbage was removed. (At least 26 infections detected by either Spybot or one of the other scans popular at the time.)

To test things, I went back to the same site after doing the scans and the same thing happened (!), so I know it was the site and not something else going on independently.

I never investigated why this was happening. I just never returned to the site since that time.

FWIW, WOT does NOT give it a bad rating (red or yellow circle), so it's not a known 'baddy.'

So, who's to say.... ?

I suggest computer users uninstall Java. It's rarely used for desktop software, and in those rare cases, I'd use alternatives. It isn't really a big risk, but there's no reason for most people to take that risk.

Its poor security record is unlikely to get better under Oracle. They aren't exactly known for making high-quality software.

"A new version of Java is ready" refers to an update. These messages will go away once you get rid of Java.

Other notes:
- I use Sumatra for PDF reading, like iris_gal. It's super-fast, open source, and has a good record.

- Javascript is unrelated to Java (Javascript's true name is ECMA script). Disabling it in your browser will make your browser all but useless. Javascript is one of the web's most vetted technologies and is generally safe. Over-the-web infections usually (not always) are due to the user accepting an "offer", choosing to install a toolbar, or otherwise choosing to install something.