Skip to content
Java updater to stop pushing Ask Toolbar, will foist Yahoo search on you instead
Naked Security Naked Security

Java updater to stop pushing Ask Toolbar, will foist Yahoo search on you instead

Oracle's Java, infamous in the past for bundling the Ask Toolbar as part of its install and update processes, is ditching Ask in favour of Yahoo's search engine.

Yahoo toolbar

Oracle’s Java, infamous in the past for bundling the Ask Toolbar as part of its install and update processes, is ditching Ask in favour of Yahoo’s search engine.

The news was announced by Yahoo CEO Marissa Meyer at yesterday’s shareholders meeting, although no details were revealed on how much Yahoo will be paying Oracle for the privilege.

As with Ask, the Yahoo “option” will be checked by default in both new installs and routine updates, so anyone in a hurry or not paying much attention will find themselves facing some unexpected changes to their systems – both the default search (the engine used when you type something other than a URL into the browser address bar) and the default page when you open a new tab will become Yahoo.

That is, if they’re not already, although that’s fairly unlikely given that Yahoo’s share of the search market is fairly small compared to the main players, Google and Microsoft’s Bing.

Java users have regularly complained about Oracle’s policy of bundling search changes with their (frequent, often crucial) security updates.

While it can be argued that businesses have a right to “monetize” software they are giving away for free by teaming up with the likes of search providers, most people would agree that such bundling, if it really has to be done, should be taking place on initial installation only.

The problem with the approach taken by Java is that their “offers” are also included in the update process. This risks prejudicing users against applying updates in a timely manner, if they know they are going to have to be on their guard against unwanted “foistware”.

Previous incumbent Ask has been all over the headlines lately, after Microsoft’s security products started labelling the toolbar as malware.

At least, that’s how many understood the recent changes, although some more sober reports gave a more accurate view of what was going on.

It seems that only older version of the toolbar were being blocked, as they were not in compliance with new policies introduced by Microsoft banning any software from trying to prevent changes to the default search on a system.

As Ask was locking down search to stop others from stealing the users it had (generally) tricked into using its services, this meant that anyone still running older, un-updated versions would see a malware warning.

The same will have happened with many other products, mainly in the foistware field but some security products did the same, mainly to block the unwanted actions of foistware.

The value of getting more people to use your search engine is immense, as can be seen from Google’s epic revenues. Every extra browser which defaults to your search engine means more income from advertisers, and more data gathered from tracking those users to fine-tune targeted advertising, so there’s considerable effort made by all sorts of players to manipulate the search engines we use.

A whole industry has built up taking pennies from search providers to get them more users, generally by bundling search-altering code with other software, using techniques ranging from devious through duplicitous to downright sneaky.

On that scale, the efforts made by Oracle to push Yahoo on Java users is relatively tame, but still annoying to many. Anti-foistware crusader Ben Edelman of Harvard Business School, who has been highlighting the dodgy tactics of Ask and others for over a decade, described the Java Yahoo “offer” as “still a despicable tactic”.

The lesson to be learned here is always, always pay attention to each and every screen presented to you by software, whether during install or updates, and make sure you know what each click you make means.

Whether it’s an OK or a Next, if there’s text or a checkbox on the screen, you could well be agreeing to something, so make sure you know what that might be before you click.

Of course, you may want to use Yahoo, or indeed Ask, as your search provider, but it’s not a massive task to make the necessary changes for yourself.

If you spot something trying to foist unwanted system changes or junk software on you, it should be treated as a warning sign and should make you think, do I really want or need this?

If it’s Java, there’s a good chance you don’t, at the very least not in your browser.


0 Comments

Another very good reason for NOT using automatic updates. Do it manually and you can decide whether, or not, you want this foistware on your system.
I always set my systems to tell me when updates are available so I can decide when and even if I want to install it. But it seems that doesn’t work properly with Adobe, they have never flagged up that there is an update available despite choosing to use that option. So I have to manually search to find out if there is/are any updates for Adobe software.

Reply

Adobe seems to have quite a wide update window to spread the load a bit, not sure how long but it certainly seems to be many days. If I know there’s been an update I jump the gun by clicking manually, too.

Reply

FWIW – My colleague noticed an option within Java Control Panel the other day. Select the “Advanced” tab, scroll to the bottom and check the “Suppress sponsor offers when installing or updating Java”.

I’ve not “tested” this, and it still doesn’t take away from the advice in this article, but I’m just sharing in case it is helpful to anyone ;)

Reply

Good spot! Right down at the very bottom of a long list of advanced options, indeed, and off by default :-)

Reply

Ah – we have finally seen reason. Ask one of the worst things that have ever been inflicted on us and now that it is no longer part of the Java bundle I am a happy camper. But, the bigger question still remains – why does Oracle continue to torture us with with their ideas of a good time?

Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!