Oracle Uses Java To Install Adware On Macs, PCs

Oracle is at the centre of a fresh adware controversy after installing Ask.com adware on Mac computers, via the default installation of Java.

Oracle is known to have done the same thing to Windows users for years now, by bundling adware with its Java installer for Windows PCs.

Adware Controversy

But Oracle’s decision to bundle adware in with the Macintosh installation of Java was revealed in a blog posting by Mac administrator Rich Trouton, who is based in Virginia.

He pointed out that Oracle used a standard installer package to install Java 7 and Java 8. But with the release of Java 8 Update 40, Oracle has changed how Java 8 for Macs is installed. Indeed, Oracle has now switched to using an application to install Java.

“You will be prompted to set Ask.com as your browser homepage, with the choice to do so checked off by default,” Trouton wrote. “If left checked, Safari’s homepage will be set with a search.ask.com URL and a Safari extension will be used to install an Ask.com toolbar.”

“If you didn’t change the option of setting Ask.com as your browser homepage, it’ll then ask you to install the Ask.com toolbar as a Safari extension,” he warned.

Ask.com is controversial as it can hijack a browser’s search requests and return ad-laden results. It pays millions of dollars so that its toolbar is distributed by companies such as Oracle, and it can also be somewhat tricky to remove. If users are not paying attention during an installation, they can easily discover it has been included in the installation.

Sneaky Superfish

Of course, Ask.com is not as potentially dangerous as the SuperFish adware. Last month was revealed that Lenovo had pre-installed Superfish, an advertising program, on some Lenovo laptops.

Lenovo had begun to bundle Superfish ad software with some of its laptops in September of last year, using it to alter users’ search results. It said it removed the software from its products in January due to user complaints over the intrusiveness of the tool.

That triggered the US Government to warn the general public to remove Superfish because it said it introduces a security vulnerability.

The hacker group the Lizard Squad apparently retaliated against Lenovo for Superfish, and took down its main corporate website in late February.

Are you a security guru? Try our quiz!

Tom Jowitt

Tom Jowitt is a leading British tech freelancer and long standing contributor to Silicon UK. He is also a bit of a Lord of the Rings nut...

View Comments

  • Yet one more reason that Java is only an educational language and should never be used in production.

  • How is this "news"?! The Ask.com toolbar and accompanying adware has been bundled in the same fashion for more than 15 years! We had to create our own corporate deployment bundles for Java based on an install in which we had manually unchecked the Ask.com selections before committing to the install on the build master and that was easily our practice from 2000 (if not before) going forward.

Recent Posts

US Regulator Approves SpaceX Falcon 9 Return To Service

US Federal Aviation Administration approves SpaceX's Falcon 9 rockets to return to service following second-stage…

18 hours ago

X Drops Unilever From Advertiser Lawsuit

Social media platform X drops Unilever from lawsuit against advertisers after reaching agreement on 'safety…

19 hours ago

US Lawmakers Seek Answers From Telcos Over China Hack

US Congressional Representatives ask for answers from AT&T, Verizon, Lumen Technologies after wiretap networks reportedly…

19 hours ago

Northvolt In Talks For 200m Euros In Short-Term Funding

Swedish EV battery start-up Northvolt in talks for 200m euros in short-term funding as it…

20 hours ago

US Labour Board Accuses Apple Of Slack Restrictions

US labour officials say Apple illegally restricted employees' right to discuss workplace issues on Slack…

20 hours ago