Installing Java on Windows without malware (Ask)

By YellowOnline on Thursday 26 March 2015 11:27 - Comments (17)
Category: Windows, Views: 5.141

I reinstalled my system this week and almost swore not to install Java anymore, but unfortunately there are still too many apps that need Java (in my case Mobile Atlas Creator). Oracle should be ashamed of their forced bundling of Java with Ask. It is possible to install Java without, but not so obvious.


In earlier versions of Java you could deselect the so-called "sponsor offerings". In the current versions you can deselect setting Ask as your default provider and another option I have forgotten right now (please let me know so I can update this post). Clicking Next, however, will install Ask anyway.

The behaviour of Java is really worrying: bundling malware, obfuscating that it will be installed even if you think you are not accepting it and to top it all: Ask installs with a 10 minute delay so if you check your installed programs right after installing Java, it seems no third party software was installed. The latter is something you usually only see with really nasty software. Even Adobe - plenty of better alternatives for their PDF reader and with the advent of HTML 5, Adobe Flash is also becoming obsolete - does not take it this far.

My advice: just don't install Java and try to find alternatives for your software that needs it. If, however, you cannot avoid it, do the following two things:

1) Install Java from an elevated command line with the switch SPONSORS=0. In my case:

code:
1
jre-8u40-windows-i586-iftw.exe SPONSORS=0



But Oracle are really taking their karma to abysmal lows: when updating Java, it will however install Ask, this time without any warning or menu whatsoever. To avoid this:


2) Open the Java Control Panel and check the box "Suppress sponsor offers when installing or updating Java"
http://static.tweakers.net/ext/f/gUYBafqShEWY6q5Us3BbHQyR/full.jpg

A last friendly word to Oracle/Java: go fuck yourselves.


Alternatively, through the registry

Add these keys. Save as <something>.reg, right-click and choose Merge.


code:
1
2
3
4
5
[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft]
"SPONSORS"="DISABLE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft]
"SPONSORS"="DISABLE"

Volgende: Koken! Spinaziestoemp met worst 04-'15 Koken! Spinaziestoemp met worst
Volgende: HP Printer Firmware Update "Not applicable" 03-'15 HP Printer Firmware Update "Not applicable"

Comments


By Tweakers user Hennie-M, Thursday 26 March 2015 11:40

And all I want is a registry key or a GPO setting to supress this.
bastards

By Tweakers user YellowOnline, Thursday 26 March 2015 11:42

Hennie-M wrote on Thursday 26 March 2015 @ 11:40:
And all I want is a registry key or a GPO setting to supress this.
bastards
U vraagt, wij draaien. Zie edit onderaan.

----------

"OP delivers", see my edit at the bottom of the post. A GPO is more complicated because you need to use the CLSID then, which changes between versions.

[Comment edited on Thursday 26 March 2015 11:54]


By Tweakers user Hennie-M, Thursday 26 March 2015 11:49

YellowOnline wrote on Thursday 26 March 2015 @ 11:42:
[...]


U vraagt, wij draaien. Zie edit onderaan.
Dat je een held bent!

Overigens, ik heb net de Chrome installer gedraaid, en ik kreeg geen vraag voor Java. (Chrome op windows 10) en mijn collega heeft zojuist zijn U31 geupdate naar U40 en daar kwam wel de vraag om ASK te installeren.

By Tweakers user onok, Thursday 26 March 2015 11:52

JAVA RUNS ON 3 BILLION DEVICES!
O-)

By Tweakers user @r!k, Thursday 26 March 2015 12:29

onok wrote on Thursday 26 March 2015 @ 11:52:
JAVA RUNS ON COMPROMISES 3 BILLION DEVICES!
O-)
FTFY

By Tweakers user Ravefiend, Thursday 26 March 2015 15:31

Merk op dat dit ook in de documentatie beschreven staat:

https://docs.oracle.com/j...re-installer-options.html

SPONSORS=0, if used, entirely bypasses sponsor offers such as browser add-ons. This field is available as of the 7u55 release. Note that sponsor offers, and therefore this functionality, is only applicable to online 32 bit JRE installers and Auto Update mechanisms.

Disclaimer: ik werk voor Oracle maar deze commentaar doe ik dan maar 'in eigen naam', of hoe zegt met dat ook alweer .... :+

By Tweakers user Comgenie, Thursday 26 March 2015 16:49

By deselecting all sponsor options during the installation, the malware can be avoided. However this is mentioned somewhere in a big wall of text and I didn't saw it at the first glance.

Because of this (and the common security leaks), I've uninstalled it on most of my computers except for the one I use for android development.

By Tweakers user BeefHazard, Thursday 26 March 2015 17:16

Would Unchecky work against this? Or is it too simple in its nature? I love that app, it's saved me quite the headache.

By Tweakers user hellfire_ultd, Thursday 26 March 2015 19:16

Just install the JDK. Granted, it will take more diskspace, but there's no sponsorware in there.

By Tweakers user Xessive, Thursday 26 March 2015 22:20

Thanks for the tip. It's almost time for my recurring six month reinstall.
Java is installed due to some games my kids play.

By Tweakers user Mattie112, Thursday 26 March 2015 22:26

Tip: look into unchecky not only for java but for "all" installers!

By Tweakers user ACL, Friday 27 March 2015 10:26

Another alternative is using OpenJDK.

By Tweakers user Vincentio, Friday 27 March 2015 10:36

Naar aanleiding van blog van Arnoud Engelfriet over de Cryptocoin miner bij utorrent ( http://blog.iusmentis.com...ert-cryptocoin-miner-mee/ ) vermoedde ik dat Oracle dit niet zo maar mag doen.

Indien Oracle willens en wetens altijd de toolbar installeert ook als het vinkje uit staat, dan is dat in Nederland een overtreding van de "cookiewet":
Nee, dat mag niet. De cookiewet eist dat je toestemming geeft voordat er
dingen op je PC gezet mogen worden. Dat geldt voor cookies maar ook voor
software.

By Tweakers user Silence, Friday 27 March 2015 13:00

Don't install java, problem solved.

By Tweakers user YellowOnline, Friday 27 March 2015 13:11

Comgenie wrote on Thursday 26 March 2015 @ 16:49:
By deselecting all sponsor options during the installation, the malware can be avoided. However this is mentioned somewhere in a big wall of text and I didn't saw it at the first glance.
[...]
As I wrote: in the most recent installers you cannot avoid the malware by deselecting and even if you do not install at install time, Ask will install anyway upon updating.

By Tweakers user s.stok, Friday 27 March 2015 13:27

Don't forget to add
code:
1
Windows Registry Editor Version 5.00

to the top.

By Tweakers user sfranken, Saturday 28 March 2015 16:09

Oracle should have left Sun alone. But hey..

In order to comment on this post you need to be logged in. Use this link to log in when you are already a registered user. If you don't have an account you can create one here.