Login or Sign Up

Retiring JavaRa

Published November 4, 2014 in Announcements

JavaRa was created because the Java updater did not remove old and obsolete versions of the JRE, leaving security vulnerabilities in place. The latest versions of Java now completely uninstall outdated and insecure versions, with roughly the same effectiveness as JavaRa.

Java1

Now that Oracle has taken responsibility for this problem, JavaRa isn’t really needed anymore. We have decided to cease JavaRa development and will no longer be providing definition updates after December 18th 2014. Pro Club members will still receive support for JavaRa for at least a year.

    19 Comments

  1. Thanks for your efforts over the years. Your support for the next year is a classy move. Oracle should be ashamed for their previous neglect.

    Trod

    November 17, 2014

  2. So we are trusting the word of Oracle? What makes them trustworthy now?

    Digerati

    November 19, 2014

    • We did some basic effectiveness tests on their uninstaller using regshot and found it to be acceptably effective.

      It’s in Oracle’s best interest to keep enterprise using Java. Making sure the JRE is secure will need to be a priority for them.

      Shane Gowland

      November 19, 2014

  3. I agree, it is, or should be in their best interest. But where were they and their concerns the last 5-6 years since buying Java from Sun? Where were they when all the tech sites and repair shops were awash with Java related infestations? When bloggers, US-CERT, and IT Media were calling to dump Java BECAUSE these orphaned, vulnerable and exploited Java versions were left behind?

    Better late than never, but why now? Who rattled their cage? Is it because so many security experts are advising users to dump Java, and many users are following that advice? I uninstalled it on all of my systems 2 years ago (except the old notebook my grandson plays Minecraft on) and have not missed it a bit.

    I fear Oracle is trying to take credit for taking action now when the reality is, IMO, they should be ashamed, embarrassed, groveling and apologetic for ignoring this problem for years and taking so long to finally do something about it. It is NOT like they were unaware of the problem. In fact, Oracle told users it is up to us drill down into our systems and remove these old versions, not them. πŸ™

    Regshot is great, but it detects changes in the registry. All that does is ensure Java apps runs the latest version. It does not detect exploitable remnants left on the drive. Yes, most browsers today block older versions. But “security aware” users don’t want older versions just blocked, they want them gone. I would like to see JavaRA stick around long enough to determine conclusively that Oracle is committed to this in the long term – until Java is history.

    Digerati

    November 20, 2014

    • Thanks for your comment.

      I hope Oracle is sincere in their effort to keep Java as safe as possible. If they don’t do a good job in the long term, there’s no reason we can’t dust off JavaRa and update the definitions. Retired doesn’t mean dead πŸ˜‰

      Shane Gowland

      November 20, 2014

    • all java and flash versions are security risks and should never be used directly in the browser

      john ocker

      October 7, 2016

  4. I stumbled across this app recently and it’s a very handy tool for our shop where we are forced to use older versions of Java due to vendors’ latency in keeping up with the latest Java offerings. Installing the latest and greatest doesn’t work for our environment so the only way to cleanly remove older versions to install newer (but still out of date versions) seems to be this app. Thanks for creating it!

    Dave

    December 10, 2014

  5. This tool still has value even today. The Java uninstaller still leaves things behind. I very much wish this tool would go back into active development. The ability to use it on the command line remotely to nuke multiple installs of Java at once is nice.

    Chad Wilson

    June 1, 2016

  6. I’d really like to see this continue in development, I’ve recently run into machines that parts and pieces of JRE are still in the system and causing issues. JavaRa is the only automated tool that truly gets rid of everything for a clean install

    Jeff

    September 14, 2016

  7. please come back I still use this tool today πŸ™

    don

    September 17, 2016

  8. You had indicated no more JavaRa definition updates after December 18, 2014. The one that was last included was from April 2014. Is the one at this link the absolute last one? It appears to be the same as from April 2014.

    http://content.thewebatom.net/updates/javara/JavaRa.def

    Thanks, Steve

    Steve Sybesma

    December 13, 2016

    • I believe the final definitions update was in the last week of September 2014. The final time the ‘newest version’ of the JRE delivered by JavaRa was updated was January 21 2016, but I’ll update this again right now.

      Shane Gowland

      December 17, 2016

  9. Hello,

    My Name is Mark. I Would Like to Thank The Site & App Team & Make a Few Possibly Beneficial Suggestions…

    I Really Appreciated All of the Work that was Done on your Software. I Hope to See More Neat Things in the Past. If I May Be So Bold, I Have 2 Suggestions I Hope There Would be a Consideration to Make One or Both of These. Over Time I have Been Using 2 Run-times that Always Causes Issues for Me and Other People I know.

    The Fist Suggestion is That Would Singularity Be Willing to Make a Program that Would Assist on The Visual C++ Run-time Libraries. For Example, To Automatically Download “Or be Included with Program” and Install Any and All Versions the User Would Need or Choose to Install, With the Ability to Remove or Uninstall One, a Few, or All of the Run-times if an Issue were to Arise, Like a Remove and Cleanup Function & Support All Windows Versions or at Least the Most Resent ie. Vista to Win10??? There can Also Have Update-able Databases Like JavaRa Had, to add Support for New Run-time Version Releases & P{rogram Updates as Well.

    The Second Suggestion I Have is, That Me and Other People Have Issues with MS .NET Framework. Do You Think Singularity Would Take on the Challenge to Make a Program to Automatically Download and Install Any Versions the User would Want or Choose to Install and to Also Have the Ability for the User to Remove One, a Few, or All of the Versions Based on the Issues the User Would Have at the Time, ie. Won’t Install v4.5 Because of Corruption in v4.0, so a Cleanup and Removal of all and a Fresh Reinstall of .NET Would Fix the Issue.?? Which I have had to do Myself to fix it. There is Also a .Net Cleanup Tool Out on the Net, But the Issue is It will Only let you Clean & Not Install The Versions. You have to Bounce Around the Web to Find the Installers. If They Could be Included in the Program, for Example a Mini Tool Would Just have the Online Installers With the Program and Run them One By One to Download Each Version and Install. Then there can be a Full Version that Has All of the Full Redistribute-able Installers Included so the Install\Repair can Take Place Offline. This Concept Can Also be Added to My 1st Suggestion With the C++ Run-times…

    These are Just Suggestions, I hope Singularity would Work on at Least One Idea, like the C++ Libraries. Everyone Has Issues with them Even a PC Gamer Needs them for Gaming…

    If You do Start Something Like that and I see it on Your Singularity Site, I Will Donate or Register Pro to Assist in Current and Future Endeavors…

    Either Way if You Do or Don’t, Keep up the Great Work & I Will always Suggest you to Anyone involved with PC’s…

    Thank You for Your Time, Effort, & Continued Quality,
    Mark M. Nikolich
    Lead PC Repair & Sale Technician

    Mark Nikolich

    December 17, 2016

    • Hi Mark, thank you for your kind words.

      Microsoft have a .NET repair and removal tool that works reasonably well. We develop our tools on top of the .NET Framework, so creating a tool that removes .NET instances while using .NET would likely be impossible.

      The C++ Redistributable files are typically installed by 3rd party software on an ad hoc basis. I don’t imagine there would be a lot of value in being able to install multiple instances of the package, and removal can usually be performed with any standard uninstall program – such as the one in System Ninja.

      Shane Gowland

      December 17, 2016

  10. I do hope you knew that there were many that benefited greatly from this tool and also appreciated that it was kept free, for most users, regardless of all the work you guys put into it. Takes a special group to find a need and cover it or fix things for nothing that doing a good deed. I am one of that silent majority that wants to thank you for all the years of a reliable app and would hope many other would pipe up now to thank you guys as well. Thanks and excuse the time it took me to find my voice to say so πŸ˜›

    Appreciative Sloth Lurker

    Sloth'N'Lurk

    October 25, 2017

  11. Too bad you decided to retire it.. Java problems on my end just today cause apps to open with a white screen and multiple attempts at correction, cleanings with reg organizer, using the java removal tool from oracle, manually cleaning the HDD and registry of all files and keys I could find… etc…etc…etc… and your program STILL… found registry entries I could not find.. I hope this finally fixes my problem.. Oracle can’t be trusted to hold up their end of the bargain.. they never have… not int he long run anyway… Namaste and Thanks for all the fish..

    aurihazuma

    May 18, 2019

  12. Hello, Mr. Gowland:
    Just want to say “Thank You!” for all you’ve done for all computer users.
    Also, a big ‘thank you’ to all those who have expressed their appreciation for the JavaRa team.
    I really appreciate all you’ve done, & all the expressions of gratitude for your efforts.
    Have a GREAT day, Neighbors!

    Jon [sl0j0n]

    December 21, 2019

  13. This is still needed very much today cause lots of groups around the world still use those older java products cause of app support so I say and see that a majority of users and developers use those older ones or a going to the new open standard one which this product could very easily work with. In reference heres a good read; this isn’t mine but a very good read developer of this great update product.
    https://openjdk.java.net/faq/
    Oracle’s plans for OpenJDK
    What are Oracle’s plans for the OpenJDK Community?

    Oracle plans to continue to work on the next release of the Java SE platform with the Java community as part of the OpenJDK project. OpenJDK is the only open-source Java SE implementation to which Oracle plans to contribute.
    Is Oracle committed to OpenJDK?

    Yes. Oracle remains committed to OpenJDK as the best open-source Java implementation and we will continue to improve OpenJDK and welcome external contributors.
    Could you elaborate some more on Oracle’s plans for OpenJDK?

    Of course. The roadmap announced at JavaOne 2010 for Java SE accelerates the availability of Java SE with two releases, one in 2011 and one in 2012. The corresponding OpenJDK releases will continue to serve as the basis for the Oracle Java Development Kit (JDK) 7 and JDK 8. You can find out more about the roadmap and Oracle’s plans at http://blogs.oracle.com/henrik/2010/10/java_roadmap_from_javaone_2010.html.
    What is JDK 7?

    JDK 7 is the name of Oracle’s implementation of the next version of the Java SE platform. The JDK 7 Project in the OpenJDK open-source Community is the where Oracle, in concert with the broader Java and open-source community is working on implementing the features to be specified in the recently-approved Java SE 7 JSR.
    What happens with JRockit? Will it become part of OpenJDK?

    Oracle engineers are currently working to merge the Oracle Java HotSpot Java Virtual Machine (JVM) and the Oracle JRockit JVM into a converged offering that leverages the best features of each of these market-leading implementations. Oracle plans to contribute the results of the combined Oracle Java HotSpot and Oracle JRockit JVMs into OpenJDK.
    Will Oracle change the OpenJDK licensing model?

    No. The OpenJDK Community continues to thrive with contributions from Oracle, as well as other companies, researchers, and individuals, and the GPL-based licensing model is one large part of this success. Oracle has no plans to change it.
    I heard that IBM is joining OpenJDK?

    Yes. Oracle and IBM announced in October 2010 that we will collaborate in the OpenJDK Community to develop the leading open-source Java SE implementation, and make the OpenJDK Community the primary location for open-source Java SE development. Oracle and IBM will support the OpenJDK development roadmap that was proposed before JavaOne 2010, which accelerates the availability of Java SE across the open-source community. The collaboration between Oracle and IBM builds on the success of OpenJDK as the primary development platform for Java SE, and of Oracle’s and IBM’s long history of contributions to the Java community. You can find out more about the roadmap and Oracle’s plans at http://blogs.oracle.com/henrik/2010/10/java_roadmap_from_javaone_2010.html.
    OpenJDK Users & Contributors
    Who uses OpenJDK?

    Major Linux distributions such as Ubuntu, Fedora or Red Hat Enterprise Linux offer OpenJDK as their default Java SE implementation. In addition, the Eclipse Community Survey 2010 found that while most Java developers use Oracle’s commercial JDK releases, 21% of the developers participating in the survey used OpenJDK. Last but not least, many academic institutions publish research referencing or based on OpenJDK.
    Who contributes to OpenJDK?

    Most OpenJDK contributors are engineers employed by companies like Oracle to work on OpenJDK. In addition, the OpenJDK Community has a strong showing of academics, open-source operating system distribution developers, and individual software developers with an itch to scratch. Oracle has no plans to change the contribution model and is gladly accepting new contributors. In order to learn how to contribute to OpenJDK, please see http://openjdk.java.net/contribute/.
    Why is Oracle participating in OpenJDK ?

    Oracle is committed to developing the JDK codebase using an open-source model. Oracle is committed to this way of working because it allows the best ideas for evolving the technology to be shaped and brought into the codebase by lowering the barriers to participation.
    Is Oracle welcoming new contributors into OpenJDK?

    Absolutely – but be prepared to do a lot of learning! A good way to get into the project is to subscribe to a mailing list on a subject that interests you, watch discussions and reviews to pick up the tone of developers working in that area, and to then start reviewing patches proposed by other OpenJDK Community members.
    Compatibility
    Will Oracle make the Java SE 6 TCK available to the OpenJDK Community?

    For implementations meeting the requirements of the OpenJDK TCK License Agreement, a process to obtain the TCK is documented on the OpenJDK web site in the Conformance Group at http://openjdk.java.net/groups/conformance/JckAccess/index.html.

    Taylor Miller

    July 29, 2021

Β Leave a reply