vendredi 26 juin 2015

Java installer is making changes, but don't get excited just yet

yahoo-toolbar

Security problems aside, Java has been a thorn in people's sides for other reasons. When installed or updated, the app breezes you right past the part where it installs the Ask Toolbar. Sure it does put it on the screen, but it's set to opt in and many people are too busy clicking OK to notice. So when Ask's inclusion was canceled it seemed like good news.

Not really. Instead, Oracle has opted to move on and will now start changing the default search for its customers. If you aren't careful, then you can expect to find Yahoo as your new default. Are you excited yet?

"We have definitely made sure that our onboarding process is one that is highly transparent and gives users choice," a Yahoo spokesman told The Wall Street Journal.

Meanwhile, security firm Sophos wasn't quite as excited as the search company. "The problem with the approach taken by Java is that their 'offers' are also included in the update process. This risks prejudicing users against applying updates in a timely manner, if they know they are going to have to be on their guard against unwanted foistware".

That's a real problem given Java's inherent security woes. Microsoft went as far as to label the Ask Toolbar as malware.

However, according to Sophos, this only flagged older versions of Java, which were no longer supported. The company claims that newer versions were still free to install whatever they wished.

It really comes down to the users paying attention and not just clicking past to hurry the process. Diligence has unfortunately become essential in many software installations.



Aucun commentaire:

Enregistrer un commentaire