Oracle Uses Java To Install Adware On Macs, PCs

Oracle is at the centre of a fresh adware controversy after installing Ask.com adware on Mac computers, via the default installation of Java.

Oracle is known to have done the same thing to Windows users for years now, by bundling adware with its Java installer for Windows PCs.

Adware Controversy

But Oracle’s decision to bundle adware in with the Macintosh installation of Java was revealed in a blog posting by Mac administrator Rich Trouton, who is based in Virginia.

He pointed out that Oracle used a standard installer package to install Java 7 and Java 8. But with the release of Java 8 Update 40, Oracle has changed how Java 8 for Macs is installed. Indeed, Oracle has now switched to using an application to install Java.

“You will be prompted to set Ask.com as your browser homepage, with the choice to do so checked off by default,” Trouton wrote. “If left checked, Safari’s homepage will be set with a search.ask.com URL and a Safari extension will be used to install an Ask.com toolbar.”

“If you didn’t change the option of setting Ask.com as your browser homepage, it’ll then ask you to install the Ask.com toolbar as a Safari extension,” he warned.

Ask.com is controversial as it can hijack a browser’s search requests and return ad-laden results. It pays millions of dollars so that its toolbar is distributed by companies such as Oracle, and it can also be somewhat tricky to remove. If users are not paying attention during an installation, they can easily discover it has been included in the installation.

Sneaky Superfish

Of course, Ask.com is not as potentially dangerous as the SuperFish adware. Last month was revealed that Lenovo had pre-installed Superfish, an advertising program, on some Lenovo laptops.

Lenovo had begun to bundle Superfish ad software with some of its laptops in September of last year, using it to alter users’ search results. It said it removed the software from its products in January due to user complaints over the intrusiveness of the tool.

That triggered the US Government to warn the general public to remove Superfish because it said it introduces a security vulnerability.

The hacker group the Lizard Squad apparently retaliated against Lenovo for Superfish, and took down its main corporate website in late February.

Are you a security guru? Try our quiz!

Tom Jowitt

Tom Jowitt is a leading British tech freelancer and long standing contributor to Silicon UK. He is also a bit of a Lord of the Rings nut...

View Comments

  • Yet one more reason that Java is only an educational language and should never be used in production.

  • How is this "news"?! The Ask.com toolbar and accompanying adware has been bundled in the same fashion for more than 15 years! We had to create our own corporate deployment bundles for Java based on an install in which we had manually unchecked the Ask.com selections before committing to the install on the build master and that was easily our practice from 2000 (if not before) going forward.

Recent Posts

UK’s CMA Readies Cloud Sector “Behavioural” Remedies – Report

Targetting AWS, Microsoft? British competition regulator soon to announce “behavioural” remedies for cloud sector

5 hours ago

Former Policy Boss At X Nick Pickles, Joins Sam Altman Venture

Move to Elon Musk rival. Former senior executive at X joins Sam Altman's venture formerly…

7 hours ago

Bitcoin Rises Above $96,000 Amid Trump Optimism

Bitcoin price rises towards $100,000, amid investor optimism of friendlier US regulatory landscape under Donald…

8 hours ago

FTX Co-Founder Gary Wang Spared Prison

Judge Kaplan praises former FTX CTO Gary Wang for his co-operation against Sam Bankman-Fried during…

9 hours ago