Results 1 to 10 of 10

Thread: COMPLETELY Remove Java From System

Hybrid View

  1. #1
    Join Date
    Mar 2013
    Beans
    74

    COMPLETELY Remove Java From System

    How can I completely remove Java from a UCE system? I need to completely remove it from a system for security reasons.

    Thanks!

  2. #2
    Join Date
    Feb 2007
    Location
    West Hills CA
    Beans
    8,050
    Distro
    Ubuntu 12.10 Quantal Quetzal

    Re: COMPLETELY Remove Java From System

    Open a terminal:

    Code:
    dpkg --list | grep Java
    dpkg --list | grep Java > list_of_java_packages.txt
    That will give you a starting point. I would expect some breakage because Java is extensively embedded throughout the Ubuntu operating system.
    -------------------------------------
    Oooh Shiny: PopularPages

    Unumquodque potest reparantur. Patientia sit virtus.

  3. #3
    Join Date
    Jul 2008
    Location
    The Left Coast of the USA
    Beans
    Hidden!
    Distro
    Kubuntu

    Re: COMPLETELY Remove Java From System

    May I ask what security reasons?

  4. #4
    Join Date
    Mar 2013
    Beans
    74

    Re: COMPLETELY Remove Java From System

    Quote Originally Posted by QIII View Post
    May I ask what security reasons?
    I've been seeing bad reports of vulnerabilities with Java, so I try to stay away from it as much as possible. I'm sure the media is overhyped, but unless I install apps that are critically in need of Java, I'd rather remove it until I need it. Just one less thing to have to worry about.

  5. #5
    Join Date
    Mar 2013
    Beans
    74

    Re: COMPLETELY Remove Java From System

    Quote Originally Posted by tgalati4 View Post
    Open a terminal:

    Code:
    dpkg --list | grep Java
    dpkg --list | grep Java > list_of_java_packages.txt
    That will give you a starting point. I would expect some breakage because Java is extensively embedded throughout the Ubuntu operating system.
    OK great then just remove the ones I need through the Software Center or Terminal?

  6. #6
    Join Date
    Feb 2007
    Location
    West Hills CA
    Beans
    8,050
    Distro
    Ubuntu 12.10 Quantal Quetzal

    Re: COMPLETELY Remove Java From System

    I use noscript as an add-on in Firefox and that allows to you selectively turn on Javascript for websites that you need to have access to. That will give you perhaps 80% of the security that you need from web-browsing, Java exploits. Another 10% improvement will come from keeping Java updated as vulnerabilities get patched and pushed to your computer through normal updates. Simply removing all Java packages will probably cause you more grief than you expect, since a lot of applications rely on Java to function properly.

    The only way to guarantee security on your system is to disconnect it from the internet. But if you remain connected to the internet, and you use the Web on a daily basis, then Java is required for the correct operation of many, many websites. It is a compromise and one has to weigh the risks.
    -------------------------------------
    Oooh Shiny: PopularPages

    Unumquodque potest reparantur. Patientia sit virtus.

  7. #7
    Join Date
    Jul 2008
    Location
    The Left Coast of the USA
    Beans
    Hidden!
    Distro
    Kubuntu

    Re: COMPLETELY Remove Java From System

    I don't think it's necessary to remove Java completely.

    The recent exploits you have read about, which are terrible and Oracle probably needs to do a ground-up refactoring of the entire stack, depend on gaining access via the Java browser plugin, which can be disabled.

    You may have desktop applications that depend on Oracle Java 7 or OpenJDK 7, in which case you might run into difficulties. Perhaps not. I'd say it's a fair bet you would, though.

    As far as the web goes, there are fewer and fewer sites that use Java, and that has decreased sharply since the latest round of exploits. Just disable the browser unless you need it for a trusted site and then disable it again when you are done.

    By the way, javascript is not Java.
    Last edited by QIII; May 21st, 2013 at 03:46 AM.

  8. #8
    Join Date
    Mar 2007
    Beans
    453
    Distro
    Ubuntu Studio 12.04 Precise Pangolin

    Re: COMPLETELY Remove Java From System

    Quote Originally Posted by tgalati4 View Post
    I use noscript as an add-on in Firefox and that allows to you selectively turn on Javascript for websites that you need to have access to.
    Java and Javascript are two very different languages, with very different security flaws.

    That will give you perhaps 80% of the security that you need from web-browsing, Java exploits.
    NoScript will not block the most effective Java exploits.

    jonathon
    And now I bend the knee of my heart,
    Imploring you for your kindness.

  9. #9
    Join Date
    Mar 2013
    Beans
    74

    Re: COMPLETELY Remove Java From System

    Hi everyone,

    Yeah, for the record, JavaScript and Java are two totally different things. Most websites these days rely on JavaScript for something to work, whereas while some web apps relied on Java to work in the past, fewer websites use Java nowadays.

    As for JavaScript, I've used noscript before, but it was a pain to use. I felt like I couldn't even breathe on the web at all. Usually I haven't experienced any major security vulnerabilities with JavaScript. That's not to say that none exist (I'm sure they do), but JavaScript isn't a large enough threat to me to entirely block it. I'd rather just keep my browser updated with the latest security updates.

    As for Java, in the past I used a good bit of Linux apps that required Java, but lately it hasn't been the case. The majority of the apps I run are native code or removing Java doesn't break anything critical in the apps I'd need to use on a daily basis. In the past, this wasn't the case, but nowadays, it seems I can get by without Java on a day-to-day workflow. While the security vulnerabilities surrounding Java are probably overhyped, since I'm not really using it right now, I'd rather just remove it so it's one less vulnerability to have to worry about. If I get to the point where an app I use on a regular basis requires Java, I can re-install Java and go back to keeping it updated regularly with security updates.

    Ever since Oracle took over Java, they've really made a mess of things, just like Abode and the acquisition of Macromedia.

    Speaking of Adobe, I'm using a slightly similar route with Flash. Abode is slowing phasing out future major releases of Flash for FireFox, so I'm probably just going to pull Flash from FireFox and use the built-in Flash plugin inside Chrome instead. There are some websites I need to access Flash in, but I'd rather use Chrome for those (since they update Flash automatically), and just use FireFox for the regular sites I browse (since more and more are going HTML5).

    Coupled with Linux's already secure underpinnings, dansguardian, and ClamAV on board, I should have a "pretty secure" system. Nothing's totally immune, but it's as good as I can probably get.

  10. #10
    Join Date
    Mar 2007
    Beans
    453
    Distro
    Ubuntu Studio 12.04 Precise Pangolin

    Re: COMPLETELY Remove Java From System

    Quote Originally Posted by parkernathan View Post
    Coupled with Linux's already secure underpinnings, dansguardian, and ClamAV on board, I should have a "pretty secure" system. Nothing's totally immune, but it's as good as I can probably get.
    The most common exploits that work rely on social engineering.

    jonathon
    And now I bend the knee of my heart,
    Imploring you for your kindness.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •