Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 29 down vote favorite
3

Each time I get a Java security update, I have to remember to untick the box to install the yahoo toolbar browser plugin that they've decided, for some mad reason, is an important security feature of Java. Is there a way to get it to remember my choice, or to get the security updates without it? Or to educate Sun about what is and isn't a security update?

share|improve this question
1  
This is not really a programming-related question but I agree too much to close it. – Aaron Digulla Mar 10 '09 at 13:01
2  
Not only this, but once you perform a manual update, you must go back to the Java control panel and re-disable the "Check for updates automatically" option. It gets turned on with every update. I dislike Sun's practices with their updater very much. – JYelton Feb 22 '10 at 14:37
If there's a command-line or console based update tool that might not have the Yahoo! Toolbar option, OR it might be much easier to bypass (such as with a script). However, I have no idea if there such a thing... – FrustratedWithFormsDesigner Jan 14 '11 at 16:59

migrated from stackoverflow.com Dec 11 '10 at 11:33

4 Answers

up vote 5 down vote accepted

Two points...

If you do not want the added software you only have two options.

  1. Continue to uncheck the box and keep your automatic updates.

  2. Use the offline installer at java.sun.com. The offline installer has not added software. If you are industrious or know someone excellent with batch files you could write a script to check their ftp servers, compare file names, download a new one if present and then do a silent install.

That's about it...

I'd write the batch file for you but I really don't know how. ;)

Here is help with silent installs - http://download.oracle.com/javase/1.4.2/docs/guide/plugin/developer_guide/silent.html

share|improve this answer
up vote 2 down vote

Maybe block toolbar.yahoo.com at the router?

I had to come down to my father's house to unblock his email client after he hit the wrong option in a firewall requester after updating the email client.

When I checked the link in the email he was waiting for I noticed the Yahoo toolbar that Java had sneaked into an update.

After removing it using the add-on system in Firefox, I added toolbar.yahoo.com to the blocked list in the router, I guess I'll find out if it worked next time they push an update.

share|improve this answer
up vote 1 down vote

The Yahoo! Toolbar is supposedly easy to uninstall : How do I uninstall Yahoo! Toolbar?.

Once uninstalled, I suggest changing Java automatic updates :
Control Panel -> Java -> Update tab -> Set Notify Me to "Before downloading", OK.

This will notify you when a update is available, and will let you manually update Java, thus getting the option of refusing the Yahoo! Toolbar.

It is a good idea to keep a visual control of what Java Update is doing. Since Sun was bought by Oracle, it is no longer trust-worthy, being much more marketing-oriented.

In general, one should keep all products up to date, not only Java. As most software products do not have automatic update, regularly running an update monitor such as SUMo is recommended.

share|improve this answer
Will the industrious person distributing all these under-votes please justify himself? – harrymc Jan 11 '11 at 9:51
1  
I didn't vote, but this particular answer is recommending that you disable automatic updates for software that has had recent security vulnerabilities. That's a bad idea. It also doesn't answer the question. – TREE Jan 11 '11 at 21:33
@TREE: I didn't take into account that most people don't use regularly an update monitor like I do, so I rewrote my answer. In any case, as most Java developers have left Sun, I still doubt the necessity of automatic update. – harrymc Jan 12 '11 at 7:20
@harrymc: What is this "Sun" you speak of? (And where can I find it?) – SamB Jan 14 '11 at 21:21
@SamB: Sun Microsystems is the company that developed Java and many other open-source products. It is their owner. Unfortunately, it was recently bought by Oracle, which forced on it a profit-making culture that badly suited many developers in Sun, so they left. – harrymc Jan 14 '11 at 21:31
show 2 more comments
up vote 2 down vote

I never install java... I just copy it and manually set it to my classpath and other variables as needed to start the application.

Of course I do not get auto updates... then again.. maybe I do not want auto updates ! This ensures that I remain in control of my deployed environment and as a bonus... My toolbars are free of yahoo junk !

then again... that does snot really answer the question though

share|improve this answer
That won't get you any browser plugin either, right? Of course, when not using the browser plugin, you're better of NOT installing it. But if installing it, then the automatic update is kind of a requirement nowadays, to ensure safe browsing. – Arjan Jan 13 '11 at 19:50
Why oh why did this have to get voted so high when it even says that it doesn't actually answer the question... – SamB Jan 14 '11 at 21:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.