[Ham-Computers] RE: Sun Java

[Hsu, Aaron (NBC Universal)]

If you're that worried about the Java runtime, then uninstall all of them.  Otherwise, it doesn't make too much sense to just disable it in IE and Firefox.  Besides, many websites use Java (not just JavaScript) and these sites won't work properly without some version of Java.  Could be worse, you could still be using the old MSVM (Microsoft's Java) that's even more insecure!

BTW, if you have Windows XP SP1 or earlier, MSVM is part of Windows.  So, if you don't have Sun's Java installed, IE will default to MSVM when websites ask for Java.

Also, although I mentioned the backwards incompatibilities, there really are quite few.  I've only run into problems with "home grown" apps - apps that were developed "in-house" (at work) and poorly coded as mentioned earlier.  Most "good" developers these days know not to use hardcoded paths/servers/etc.

Oh, and one last thing...I think the Java auto-updates only update minor versions, not "major" versions.  So, if you have Java 1.4.2 (JRE v4), it will update to 1.4.2_xx where xx is the latest minor update.  If you have 1.5 (JRE v5), it will update to 1.5.xx, and 1.6 (JRE v6) will update to 1.6_u7.  So, if your app requires 1.6u7 and you don't already have some flavor of 1.6 installed, you'll never get it.


73,

  - Aaron, NN6O


-----Original Message-----
Sent: Friday, July 11, 2008 5:58 PM
Subject: [Ham-Computers] RE: Sun Java

Thanks, Aaron, for telling it the way it is!  What fun.

I presume that with Java updates turned on for both XP machines, if an existing app needed JRE v6 u7 it would already be added to my growing collection, otherwise it may not be needed so why bother to download it.

So maybe I should:
1. Forget v6 u7, knowing that with Java updates turned on, if needed, I shall receive.

2. Disable Java in MIExplorer and Mozilla Firefox, if it isn't already disabled.

3. Check my updates done on Eazy Backup 4 (ajsystems.com) for any Java.

4. If not, make a backup.  Might barely fit on a CD-R.

5. When I have eons of spare time, chop out the oldest Java and see what won't work, knowing that I will need to run every app just to be sure.  The the next oldest, and so forth.

6. In the event of casualty, hope a Restore fixes it.

I hate to have 0.5 to 0.75 GB consumed by useless JRE's, but maybe that's not all bad.

If anyone know of an easier way, please hop in!

John W0IKT
-------------- Original message ----------------------
From: "Hsu, Aaron (NBC Universal)" <aaron.hsu at nbcuni.com>
>
The "latest" Sun Java runtime environment (aka "JRE") is version 6 update 7.  It 
> can be found here:
> 
> http://java.sun.com/javase/downloads/?intcmp=1281
> 
> Scroll down to "Java Runtime Environment (JRE) 6 Update 7" and click "download".
> 
As to the previous versions, it's a bit "sticky".  Java "updates", but doesn't 
un-install previous versions.  So if you have Java auto-updates enabled, you 
might find several successive versions of Java installed.  The "sticky" part is 
that some apps hard-code the path to whatever is the "current" version when you 
installed the app.  Once you un-install that version of Java, the app that 
hardcoded the path may no longer work - at least until you re-install the app.  
> It's basically poor programming by the app vendor to hardcode a path.
> 
Anyways, I usually un-install all traces of Java except for the current version.  
I also go to the Java folder and delete the previous version folders.  Again, 
> keep in mind that you may need to re-install an app so it picks-up the path of 
> the latest version of Java you've installed.
> 
> BTW, there are some backwards compatibility issues with Java versions, but no 
> more than other apps - just look for a more recent version of the app.
> 
> 
> 73,
> 
>   - Aaron
> 
> 
> -----Original Message-----
> From: ham-computers-bounces at mailman.qth.net 
> [mailto:ham-computers-bounces at mailman.qth.net] On Behalf Of 
> jandlmiller at bellsouth.net
> Sent: Friday, July 11, 2008 4:38 PM
> To: Ham_Computers
> Subject: [Ham-Computers] Sun Java
> 
> I just received a US-CERT National Cyber Alert System, Cyber Security Alert 
> SA08-193A dealing with Sun Java.
> 
> These questions for discussion:
> 
> 1. The recommendation is clear: disable Java in Microsoft Internet Explorer and 
> Mozilla Firefox and details are provided about to do so in each browser.
> 
> My question: Is such a disable a good idea, and what might/would not work if I 
> did so?
> 
> 2.  Using Start/Control Panel/Add-Remove I see the following: 
> 
> On one XP (laptop) I find Java 2 Runtime Environment, SE v1.4.2_0
> 
> On one XP (desktop) I find all of these:
> J2SE Runtime Environment 5.0 Update 2
> J2SE Runtime Environment 5.0 Update 4
> J2SE Runtime Environment 5.0 Update 6
> Java 2 Runtime Environment, SE v1.4.2_05
> Java 2 Runtime Environment, SE v1.4.2_06
> 
> My questions:
> 1. May I assume the laptop, that has auto updates turned on for Java, is where 
> it should be?
> 
> 2. Is it safe to use Add-Remove in the Control Panel to get rid of all on the 
> desktop EXCEPT the v1.4.2_06?
> 
> John W0IKT