Computer Update Query

[STEVIEBOY1]

Good evening, My computer say it wants to install an update from Java and also adobe acrobat XI, does anyone know if these would be genuine updates, or if they may be spams or bugs? I know what adobe acrobat does, but not sure about java.

many thanks.

 

[gazthomas]

Good evening, My computer say it wants to install an update from Java and also adobe acrobat XI, does anyone know if these would be genuine updates, or if they may be spams or bugs? I know what adobe acrobat does, but not sure about java.

many thanks.

So long as they're update programs not something in the browser they should be legit. Can you upload a screenshot?

 

[Donny Dave]

Java should be installed anyway, but if your in any doubt, then download and install from the Java website.

The Adobe Acrobat update in geniune, as I've had to install it on my PC as well.

 

[Crossover]

Both sound genuine. Watch out for the add on toolbars they may try to install too. Java is evil in every shape and form

 

[Xenophon PCDGS]

I have the following Adobe products installed on my computer:-
Adobe Reader XI...............11.0.8
Adobe Air.........................14.0.0.178
Adobe Flash Player............14.0.0.176
Adobe Shockwave Player....12.1.3.153

The Java product currently on my computer is version 7.67

 

[Cletus]

I normally use Chrome and there was Abode update recently which was ok.

I also use IE and there was a dodgy-looking Adobe update message, I reluctantly set it going, but as it went on loads of warning messages came up from my anti-virus. So I stopped it.

So basically I'm saying that there may be a fake Adobe out there.

 

[mbonwick]

I have the following Adobe products installed on my computer:-
Adobe Reader XI...............11.0.8
Adobe Air.........................14.0.0.178
Adobe Flash Player............14.0.0.176
Adobe Shockwave Player....12.1.3.153

The Java product currently on my computer is version 7.67

You should probably look to update all your Adobe products (bar Shockwave) as they're out of date, and AFAIK the updates fixed some pretty major security issues.

 

[Kite159]

I use a program called Secunia PSI to check for various updates (runs twice a week), does a good job at picking up the various Adobe fixes.

 

[Xenophon PCDGS]

You should probably look to update all your Adobe products (bar Shockwave) as they're out of date, and AFAIK the updates fixed some pretty major security issues.

Thanks for that, that is why I showed the versions in my posting. I normally do this regularly, but medical matters have taken much of my time at present.

 

[Crossover]

At work we are still running on I think it is 2 major versions back of Adobe Reader and Flash. Really should try and update them but time isn't on my side and I don't really want to bork about 50 workstations in one hit

 

[BlythPower]

Java is evil in every shape and form

This is so true. It's the b@$t@rd offspring of C so it's to be expected, really.

 

[maniacmartin]

2 major versions of Flash out of date?! Yikes.

 

[STEVIEBOY1]

Java should be installed anyway, but if your in any doubt, then download and install from the Java website.

The Adobe Acrobat update in geniune, as I've had to install it on my PC as well.

Thank you for the replies. What exactly does the Java programme do on a PC?

 

[table38]

Thank you for the replies. What exactly does the Java programme do on a PC?

Have a look at http://www.java.com/en/download/faq/whatis_java.xml

Imagine that there is some "client side" browser stuff which would be far too slow to run on the server - animated menus, transitions, those funny scrolling adverts that manage to stay in the same place while you scroll up and down; pretty much anything that would be annoyingly slow if it involved your browser sending stuff back to the web site servers, them having to do some work, then sending the results back.

Instead the web site sends some java code down to your PC, and it runs there and the output is incorporated into what you see in the browser.

Sort of.

 

[yorkie]

Those of you who have Java installed, can you say what applications you use that require Java?

If you do absolutely need Java, then I would consider installing it on a separate, virtual machine, that is only turned on when you absolutely need it, and make sure it is constantly kept up-to-date.

Do you have any idea how insecure Java is?

https://www.us-cert.gov/ncas/alerts/TA13-032A

These and previous Java vulnerabilities have been widely targeted by attackers, and new Java vulnerabilities are likely to be discovered. To defend against this and future Java vulnerabilities, consider disabling Java in web browsers until adequate updates have been installed. As with any software, unnecessary features should be disabled or removed as appropriate for your environment.

For an example, see Penetration testing: IT professionals demonstrate how hackers can access webcams which shows how a Java vulnerability can be exploited.

Analyst Bjorn Johansson demonstrated to her how internet users can give hackers control of their computer, including the webcam, just by visiting a vulnerable web page with an internet browser.

--- old post above --- --- new post below ---

Java is evil in every shape and form

Indeed!
--- old post above --- --- new post below ---

At work we are still running on I think it is 2 major versions back of Adobe Reader and Flash. Really should try and update them but time isn't on my side and I don't really want to bork about 50 workstations in one hit ad:

You can register for MSI files for Adobe Flash, and simply install the MSI through Group Policy across all your clients.
--- old post above --- --- new post below ---

Thank you for the replies. What exactly does the Java programme do on a PC?

If you don't know of any applications you use that require Java, can I suggest you remove all traces of it, and see if you miss it?

 

[table38]

Those of you who have Java installed, can you say what applications you use that require Java?

Sadly a lot of the remote management stuff we have uses Java, so it's either that or I'd actually have to go into the office

Seems that here the use of Java is decreasing these days. As Yorkie says, you could just turn it off and see what it breaks, unless you work in a control room for a Nuclear Power Station...

 

[edwin_m]

Tried to get on National Rail Enquiries from the office yesterday and every time after a couple of seconds it told me my Flash player was out of date and redirected me onto the Adobe website with no option to refuse. As it's a work PC it won't let me do updates, and I think I got a Flash update a couple of days ago anyway. Tried it again from the same computer and it's fine.

 

[table38]

Maybe some advert needed it, then was either fixed or you just got some new random adverts. Sorry targeted adverts

 

[Kite159]

Work computers are the worsy for getting updates, due to several hundred/thousand ancient XP Dells still in use, means we are stuck with IE8.

I think some modern browsers block the plugins by default and if you need them you click to activate them. Much safer

 

[Crossover]

Those of you who have Java installed, can you say what applications you use that require Java?

If you do absolutely need Java, then I would consider installing it on a separate, virtual machine, that is only turned on when you absolutely need it, and make sure it is constantly kept up-to-date.

Unfortunately our new business system depends on it, which peeved me off no end (especially when they updated it and didn't turn off auto updates so users kept getting UAC prompts until I sorted it). Thankfully that is only 3 RDS (Terminal Services) machines that require it. I also use it to access an Avaya phone system backend, but that will be going soon so that will be a thing of the past too

All our company laptops and PC's used to have it when I have started. I have not included it on any machine I built though, with the view of seeing who complained...unsurprisingly not a single person! (the VPN software that used it falls back to Flash without it, so no issue there). I have had more calls from users asking if it can go because they are fed up with all the update prompts!

You can register for MSI files for Adobe Flash, and simply install the MSI through Group Policy across all your clients.

I am registered and do get the MSI files for GP roll out. Just haven't deployed one lately due to a whole host of other stuff going on (and the fact I need to write a script to disable the updates so we don't get users mithering that it needs updating)

 

[Clip]

Linux and Mac users better check their erm computers & servers


'But Apple are perfect and never have any security issues' I hear you cry

http://www.bbc.co.uk/news/technology-29361794

A "deadly serious" bug potentially affecting hundreds of millions of computers, servers and devices has been discovered.

The flaw has been found in a software component known as Bash, which is a part of many Linux systems as well as Apple's Mac operating system.

The bug, dubbed Shellshock, can be used to remotely take control of almost any system using Bash, researchers said.

Experts said it was more serious than the Heartbleed bug discovered in April.

"Whereas something like Heartbleed was all about sniffing what was going on, this was about giving you direct access to the system," Prof Alan Woodward, a security researcher from the University of Surrey, told the BBC.

"The door's wide open."

Some 500,000 machines worldwide were thought to have been vulnerable to Heartbleed. But early estimates, which experts said were conservative, suggest that Shellshock could hit at least 500 million machines.

The problem is particularly serious given that many web servers are run using the Apache system, software which includes the Bash component.

Patch immediately
Bash - which stands for Bourne-Again SHell - is a command prompt on many Unix computers. Unix is an operating system on which many others are built, such as Linux and Mac OS.

The US Computer Emergency Readiness Team (US-Cert) issued a warning about the bug, urging system administrators to apply patches.

However, other security researchers warned that the patches were "incomplete" and would not fully secure systems.

Of particular concern to security experts is the simplicity of carrying out attacks that make use of the bug.

Cybersecurity specialists Rapid7 rated the Bash bug as 10 out of 10 for severity, but "low" on complexity - a relatively easy vulnerability for hackers to capitalise on.

"Using this vulnerability, attackers can potentially take over the operating system, access confidential information, make changes, et cetera," said Tod Beardsley, a Rapid7 engineer.

"Anybody with systems using Bash needs to deploy the patch immediately."

For general home users, Prof Woodward suggested simply keeping an eye on manufacturer websites for updates - particularly for hardware such as broadband routers.

 

[Emyr]

Java is evil in every shape and form

Java is a very successful and productive language for the development of the server-side of web applications.

 

[Xenophon PCDGS]

Java is a very successful and productive language for the development of the server-side of web applications.

I was somewhat surprised to hear Java being decried. Does it appear in a great range of products ?

 

[Crossover]

Java is a very successful and productive language for the development of the server-side of web applications.

It is a pain in the proverbial to manage

I was somewhat surprised to hear Java being decried. Does it appear in a great range of products ?

Sadly too many...

 

[Searle]

At work, my Flash is so out of date that I can't even listen to Radio 1 on my laptop, or play Youtube videos!

 

[Strathclyder]

The only thing I use Java for is a certain video game with blocks. I think some of our younger members might know what I'm referring to.

 

[yorkie]

I am registered and do get the MSI files for GP roll out. Just haven't deployed one lately due to a whole host of other stuff going on (and the fact I need to write a script to disable the updates so we don't get users mithering that it needs updating)

Apologies if you already know this, but:

Open the relevant Group Policy Object (GPO) for your PCs, and go to:
Computer Configuration > Policies > Software Settings > Software installation

Right-click > New> Package. Select MSI (make sure MSI is located in an appropriate share with appropriate permissions, e.g. "DOMAIN\Domain Computers" has read & execute/read rights)

It should take 1 minute to do.
--- old post above --- --- new post below ---

At work, my Flash is so out of date that I can't even listen to Radio 1 on my laptop, or play Youtube videos!

I'd have concerns about security there! Do they have out-of-date versions of Java too?
--- old post above --- --- new post below ---

The only thing I use Java for is a certain video game with blocks. I think some of our younger members might know what I'm referring to.

I know exactly what you are referring to.

However I am sure if you explain to the young person how vulnerable Java is (show them the webcam video I linked to earlier), they will understand You can also assure them that as soon as version is released that doesn't require Java they can use it again, though chances are they'll have outgrown it by then.

(I hope that the person isn't, in fact, you? )

 

[Crossover]

I am registered and do get the MSI files for GP roll out. Just haven't deployed one lately due to a whole host of other stuff going on (and the fact I need to write a script to disable the updates so we don't get users mithering that it needs updating)

Apologies if you already know this, but:

Open the relevant Group Policy Object (GPO) for your PCs, and go to:
Computer Configuration > Policies > Software Settings > Software installation

Right-click > New> Package. Select MSI (make sure MSI is located in an appropriate share with appropriate permissions, e.g. "DOMAIN\Domain Computers" has read & execute/read rights)

It should take 1 minute to do.

Yes, aware of that, but it comes back to Change Control and the time for testing. Rogue Flash and Java updates have been known to break things before so one needs doing and making sure key things still work before unleashing the tide. Hence my reference earlier to not wanting to bork 50 machines in one hit!

 

[Xenophon PCDGS]

At work, my Flash is so out of date that I can't even listen to Radio 1 on my laptop, or play Youtube videos!

Now then young scallywag, in my days we went to work..to work...not to involve in such frivolities...
--- old post above --- --- new post below ---

Work computers are the worsy for getting updates, due to several hundred/thousand ancient XP Dells still in use, means we are stuck with IE8.

Sorry to hear that you still have IE8. Does anyone think that IE12 will be timed to be launched at the same time of Windows 9 ? Internet Explorer no longer occupies the prime position that it once did in past days.

 

[Lrd]

though chances are they'll have outgrown it by then.

You do not simply "outgrow" Minecraft and I'm not exactly young either. But that is the only thing I use Java for and I am switched on enough to know what is happening to my computer.

Is Java 8 just as bad?
--- old post above --- --- new post below ---

At work, my Flash is so out of date that I can't even listen to Radio 1 on my laptop, or play Youtube videos!

Use the HTML5 version of YouTube https://www.youtube.com/html5?gl=GB