Educause Security Discussion mailing list archives
Re: McAfee AV software bundled with Jave updates
From: "Tonkin, Derek K." <Derek_Tonkin () BAYLOR EDU>
Date: Thu, 30 Jul 2009 15:20:04 -0500
I don't recall what version it was but it came through the java updater system tray app. I think that they have a variety of things that can populate the second page of the update (the one where it tries to add bloatware) because in the course of a single day I've seen it try to put two different apps on two different computers through the updates (this was a while back, one computer got Yahoo toolbar and the other got OpenOffice.org). -------------Baylor University------------- Derek Tonkin Information Security Analyst Information Technology Services - Security derek_tonkin () baylor edu 254-710-7061 ---------------Sic 'em Bears--------------- -----Original Message----- From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Fields, Kimberly Sent: Thursday, July 30, 2009 3:04 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] McAfee AV software bundled with Jave updates May I ask what version of Java are you updating to? I just updated my client to the latest version with no problems. -----Original Message----- From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tonkin, Derek K. Sent: Thursday, July 30, 2009 3:07 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] McAfee AV software bundled with Jave updates I just dealt with this on a staff members computer yesterday. We try to encourage people to keep things up to date but I'm considering changing my stance on Java. They have historically included OpenOffice.org or a Yahoo or Google toolbar which also defaulted to being checked. This is even worse though and will cause our helpdesk a fair amount of pain. It doesn't really surprise me that they did it but it certainly does disappoint me in both Sun and McAfee. -------------Baylor University------------- Derek Tonkin Information Security Analyst Information Technology Services - Security derek_tonkin () baylor edu 254-710-7061 ---------------Sic 'em Bears--------------- -----Original Message----- From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Gary Flynn Sent: Thursday, July 30, 2009 1:52 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] McAfee AV software bundled with Jave updates When the automatic update mechanism included with Java kicks off and you tell it to update, the setup box now comes up with an option to install a 30 day version of McAfee anti virus software. The option is checked by default so anyone that updates their Java installation without paying close attention will also install McAfee. Has anyone researched this already enough to have found a registry setting or something else so at least the default action will be NOT to install the software? I can't believe they did this. Gary Flynn Security Engineer James Madison University www.jmu.edu/computing/security _____________________________________________________________________ Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may include AMERIGROUP member(s) information that is legally privileged. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy copies of the original message. _____________________________________________________________________
Current thread:
- McAfee AV software bundled with Jave updates Gary Flynn (Jul 30)
- <Possible follow-ups>
- Re: McAfee AV software bundled with Jave updates Tonkin, Derek K. (Jul 30)
- Re: McAfee AV software bundled with Jave updates Fields, Kimberly (Jul 30)
- Re: McAfee AV software bundled with Jave updates Tonkin, Derek K. (Jul 30)
- Re: McAfee AV software bundled with Jave updates Dexter Caldwell (Jul 30)
- Re: McAfee AV software bundled with Jave updates Kevin Shalla (Jul 30)
- Re: McAfee AV software bundled with Jave updates Gary Flynn (Jul 31)