Monday 18 March 2013

Why does Java/Oracle keep trying to install CrapWare on by VM? And why their sales team love java vulnerabilities!

Everytime I do an update to Java (which is quite a common event these days), I get something like this:

image

Apart from the common decency that the extra install option should be disabled by default:

image

Isn’t it really bad (and even border-line illegal) to push a new product due to security updates?

In a way, you can see how the marketing/sales guys at Oracle love Java Security Vulnerabilities. It gives them the ability to upsell more ‘Ask Toolbars’ to one of those 3 Billion users!

image