Login/Register

Retiring JavaRa

Published November 4, 2014 in Announcements

JavaRa was created because the Java updater did not remove old and obsolete versions of the JRE, leaving security vulnerabilities in place. The latest versions of Java now completely uninstall outdated and insecure versions, with roughly the same effectiveness as JavaRa.

Java1

Now that Oracle has taken responsibility for this problem, JavaRa isn’t really needed anymore. We have decided to cease JavaRa development and will no longer be providing definition updates after December 18th 2014. Pro Club members will still receive support for JavaRa for at least a year.

    15 Comments

  1. Thanks for your efforts over the years. Your support for the next year is a classy move. Oracle should be ashamed for their previous neglect.

    Trod

    November 17, 2014

  2. So we are trusting the word of Oracle? What makes them trustworthy now?

    Digerati

    November 19, 2014

    • We did some basic effectiveness tests on their uninstaller using regshot and found it to be acceptably effective.

      It’s in Oracle’s best interest to keep enterprise using Java. Making sure the JRE is secure will need to be a priority for them.

      Shane Gowland

      November 19, 2014

  3. I agree, it is, or should be in their best interest. But where were they and their concerns the last 5-6 years since buying Java from Sun? Where were they when all the tech sites and repair shops were awash with Java related infestations? When bloggers, US-CERT, and IT Media were calling to dump Java BECAUSE these orphaned, vulnerable and exploited Java versions were left behind?

    Better late than never, but why now? Who rattled their cage? Is it because so many security experts are advising users to dump Java, and many users are following that advice? I uninstalled it on all of my systems 2 years ago (except the old notebook my grandson plays Minecraft on) and have not missed it a bit.

    I fear Oracle is trying to take credit for taking action now when the reality is, IMO, they should be ashamed, embarrassed, groveling and apologetic for ignoring this problem for years and taking so long to finally do something about it. It is NOT like they were unaware of the problem. In fact, Oracle told users it is up to us drill down into our systems and remove these old versions, not them. 🙁

    Regshot is great, but it detects changes in the registry. All that does is ensure Java apps runs the latest version. It does not detect exploitable remnants left on the drive. Yes, most browsers today block older versions. But “security aware” users don’t want older versions just blocked, they want them gone. I would like to see JavaRA stick around long enough to determine conclusively that Oracle is committed to this in the long term – until Java is history.

    Digerati

    November 20, 2014

    • Thanks for your comment.

      I hope Oracle is sincere in their effort to keep Java as safe as possible. If they don’t do a good job in the long term, there’s no reason we can’t dust off JavaRa and update the definitions. Retired doesn’t mean dead 😉

      Shane Gowland

      November 20, 2014

    • all java and flash versions are security risks and should never be used directly in the browser

      john ocker

      October 7, 2016

  4. I stumbled across this app recently and it’s a very handy tool for our shop where we are forced to use older versions of Java due to vendors’ latency in keeping up with the latest Java offerings. Installing the latest and greatest doesn’t work for our environment so the only way to cleanly remove older versions to install newer (but still out of date versions) seems to be this app. Thanks for creating it!

    Dave

    December 10, 2014

  5. This tool still has value even today. The Java uninstaller still leaves things behind. I very much wish this tool would go back into active development. The ability to use it on the command line remotely to nuke multiple installs of Java at once is nice.

    Chad Wilson

    June 1, 2016

  6. I’d really like to see this continue in development, I’ve recently run into machines that parts and pieces of JRE are still in the system and causing issues. JavaRa is the only automated tool that truly gets rid of everything for a clean install

    Jeff

    September 14, 2016

  7. please come back I still use this tool today 🙁

    don

    September 17, 2016

  8. You had indicated no more JavaRa definition updates after December 18, 2014. The one that was last included was from April 2014. Is the one at this link the absolute last one? It appears to be the same as from April 2014.

    http://content.thewebatom.net/updates/javara/JavaRa.def

    Thanks, Steve

    Steve Sybesma

    December 13, 2016

    • I believe the final definitions update was in the last week of September 2014. The final time the ‘newest version’ of the JRE delivered by JavaRa was updated was January 21 2016, but I’ll update this again right now.

      Shane Gowland

      December 17, 2016

  9. Hello,

    My Name is Mark. I Would Like to Thank The Site & App Team & Make a Few Possibly Beneficial Suggestions…

    I Really Appreciated All of the Work that was Done on your Software. I Hope to See More Neat Things in the Past. If I May Be So Bold, I Have 2 Suggestions I Hope There Would be a Consideration to Make One or Both of These. Over Time I have Been Using 2 Run-times that Always Causes Issues for Me and Other People I know.

    The Fist Suggestion is That Would Singularity Be Willing to Make a Program that Would Assist on The Visual C++ Run-time Libraries. For Example, To Automatically Download “Or be Included with Program” and Install Any and All Versions the User Would Need or Choose to Install, With the Ability to Remove or Uninstall One, a Few, or All of the Run-times if an Issue were to Arise, Like a Remove and Cleanup Function & Support All Windows Versions or at Least the Most Resent ie. Vista to Win10??? There can Also Have Update-able Databases Like JavaRa Had, to add Support for New Run-time Version Releases & P{rogram Updates as Well.

    The Second Suggestion I Have is, That Me and Other People Have Issues with MS .NET Framework. Do You Think Singularity Would Take on the Challenge to Make a Program to Automatically Download and Install Any Versions the User would Want or Choose to Install and to Also Have the Ability for the User to Remove One, a Few, or All of the Versions Based on the Issues the User Would Have at the Time, ie. Won’t Install v4.5 Because of Corruption in v4.0, so a Cleanup and Removal of all and a Fresh Reinstall of .NET Would Fix the Issue.?? Which I have had to do Myself to fix it. There is Also a .Net Cleanup Tool Out on the Net, But the Issue is It will Only let you Clean & Not Install The Versions. You have to Bounce Around the Web to Find the Installers. If They Could be Included in the Program, for Example a Mini Tool Would Just have the Online Installers With the Program and Run them One By One to Download Each Version and Install. Then there can be a Full Version that Has All of the Full Redistribute-able Installers Included so the Install\Repair can Take Place Offline. This Concept Can Also be Added to My 1st Suggestion With the C++ Run-times…

    These are Just Suggestions, I hope Singularity would Work on at Least One Idea, like the C++ Libraries. Everyone Has Issues with them Even a PC Gamer Needs them for Gaming…

    If You do Start Something Like that and I see it on Your Singularity Site, I Will Donate or Register Pro to Assist in Current and Future Endeavors…

    Either Way if You Do or Don’t, Keep up the Great Work & I Will always Suggest you to Anyone involved with PC’s…

    Thank You for Your Time, Effort, & Continued Quality,
    Mark M. Nikolich
    Lead PC Repair & Sale Technician

    Mark Nikolich

    December 17, 2016

    • Hi Mark, thank you for your kind words.

      Microsoft have a .NET repair and removal tool that works reasonably well. We develop our tools on top of the .NET Framework, so creating a tool that removes .NET instances while using .NET would likely be impossible.

      The C++ Redistributable files are typically installed by 3rd party software on an ad hoc basis. I don’t imagine there would be a lot of value in being able to install multiple instances of the package, and removal can usually be performed with any standard uninstall program – such as the one in System Ninja.

      Shane Gowland

      December 17, 2016

Post a Reply

Your email address will not be published. Required fields are marked *