Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How can I be sure the java I updated to is authentic?


  • Please log in to reply
13 replies to this topic

#1 faster

faster

  • Members
  • 108 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 23 October 2013 - 08:48 PM

I've used my PC for years, and know how essential java is. I also know how many crooked and destructive people are out there.

 

I just updated my java, and was sent to a page to "verify" the installation. I don't know if I can trust this site, because I'd always thought the source for all java was Sunjava or Javasun, something like that. And this site is called java.com, and it's coming from a site called Oracle.

 

Has the name been changed? Are these sites a legitimate source for updating java? I don't ever remember having to "verify" my java installations in the past.

 

I'm being asked to click to run an application that can severely damage my PC and compromise my security if it isn't trustworthy. I don't know whether to trust them, but I want to be sure before I click the popup to run the application to "verify" that my java is properly installed. I could just as easily be permitting unrestricted access to crooks.

 

And if they aren't legitimate, what can I do about the update to java that I just made? It, too, could be harmful.

 

I'd really appreciate some guidance.


Edited by faster, 23 October 2013 - 08:49 PM.


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:02 AM

Posted 24 October 2013 - 02:16 AM

I just updated my java, and was sent to a page to "verify" the installation.

Hi faster -
Can you tell me what you mean by "Sent a page".
Was this just a screen filler, or was it sent in a pop-up small corner message, or ??

 

I have never been "Sent a page", rather I visit the link below to check ...........

Visit This Site Verify Java Version
Check to ensure that you have the recommended version of Java installed for your operating system.
After clicking the button below, a security prompt may appear. Click Run to allow the verification process to continue.

Thank You -



#3 Romeo29

Romeo29

    Learning To Bleep


  • Members
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:10:02 AM

Posted 24 October 2013 - 02:46 AM

Oracle corporation bought Sun Microsystems some time ago. They have rebranded everything. Now its Oracle Java.

 

Older Sun sites now point to Oracle sites.

 

http://www.oracle.com/us/sun/sun-products-map/index.html


Edited by Romeo29, 24 October 2013 - 02:48 AM.


#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,593 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:02 AM

Posted 24 October 2013 - 09:23 AM

I've used my PC for years, and know how essential java is.

But do you really need it?

Using Java is an unnecessary security risk...especially using older versions which have vulnerabilities that malicious sites can use to exploit and infect your system.Although, Java is commonly used in business environments and many VPN providers still use it, the average user does not need to install Java software.
- Why You don't need Java
- W3Techs usage statistics and market share data of Java on the web

I recommend just uninstalling Java if you don't use it.

If you're going to use Java, many security researchers and computer security organizations caution users to limit their usage and disable Java in your browser.
- How to disable Java Plug-ins or add-ons in common web browsers.
- How to turn off Java on your browser
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,593 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:02 AM

Posted 24 October 2013 - 09:28 AM

I don't ever remember having to "verify" my java installations in the past.

You are asked to verify your Java version because as I noted previously, older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Verification will confirm whether you need to update or not.

In fact, older unpatched versions of other popular software like Adobe (Reader, Flash Player, Shockwave Player) Apple iTunes, Quick Time, VLC Media Player all are vulnerable to exploits and require frequent updating or you increase the risk of system infection.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:02 AM

Posted 24 October 2013 - 03:47 PM

Hello faster, you have not yet responded ..........

 

A quick question to quietman7. If "You are asked to verify your Java version........" why do we see so many people with older versions of Java posting here all the time ??

Up to recent days I would guess 70% had old Java installed, while now 30% have either Mixed (old and new) or just newer versions ??

 

Just an observation.



#7 frankp316

frankp316

  • Members
  • 2,677 posts
  • OFFLINE
  •  
  • Local time:10:02 AM

Posted 24 October 2013 - 05:46 PM

I think the reason is there was a time when old versions of Java needed to be uninstalled manually when a new version was released. That's an easy thing for users to forget about. Oracle changed that a couple of years ago. 



#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,593 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:02 AM

Posted 24 October 2013 - 05:58 PM

Java has several pages from which you can download Java software. I believe some have verifiers on it while others do not. Why? That would be a question for Java.

Starting with Java 6u10, the uninstaller incorporated in each new release uses Enhanced Auto update to automatically remove the previous version when updating to a new release. Future update releases will install the existing release and remove the previous release. Each update release will no longer be listed as separate items in Windows 'Add or Remove Programs' and will no longer consume additional disk space. Older versions prior to the incorporated installer still have to be manually removed via Add/Remove or Programs and Features in Control Panel.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:02 AM

Posted 24 October 2013 - 06:19 PM

I believe some have verifiers on it while others do not. Why? That would be a question for Java.
There are still 7 U10 installed, but it may also be related to internet usage / or other "things" ??

Many Thanks - I may just follow Java Forums for a while -


Edited by noknojon, 24 October 2013 - 06:22 PM.


#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,593 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:02 AM

Posted 24 October 2013 - 06:28 PM

Since I stopped using Java, I don't read as much of their info as I used to so I may be going to their forums to check for answers myself.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:02 AM

Posted 25 October 2013 - 04:27 AM

As a side note -

You may note that I request a Security Check by Screen317 from HERE, as this is one of the items it will pick up.

 

It also shows conflicts in Antivirus etc. programs that I look for.


Edited by noknojon, 25 October 2013 - 04:28 AM.


#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,593 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:02 AM

Posted 25 October 2013 - 07:53 AM

Yep its a handy tool.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#13 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:02 AM

Posted 26 October 2013 - 05:47 AM

As a side note to this topic -
I currently have a computer (headed to Am I Infected) with these versions all listed.
Note the Updater is also one of the Java items ?? I have still not found an exact answer.
 
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Java™ 6 Update 14 (64-bit) (Version: 6.0.140)
Java™ 6 Update 22 (Version: 6.0.220)


#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,593 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:02 AM

Posted 26 October 2013 - 08:24 PM


The private discussion thread is 13 pages long now. I'd have to review it as I have not kept many notes on it.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users