Java has earned some of the blame. For example, leaving old versions of Java installed after updating even when automatic updating of the program was enabled. I don't know if they are doing it now but two, three years ago they did and you can blame that on some infections.ZOU1 said:Don't blame Java, blame outdated C and C++ code that Microsoft uses.
The first time ever that I putted my eyes on Java, I had 16 Javas on my add/remove programs. The first month that I spend learning about security it was spent on learning about Java and why I had 16 of those in my computer occupying a Gig of space. I also wanted to find out if my computer was going to break once I started uninstalling some of them. After a month of learning, and uninstalling three or four at a time, I ended up with no Java. To my amazement, nothing broke and I was able to do all things that I normally do with no problems. I learned a lot that month.
After all that, I installed the latest version but a few months later when Java started bundling things with it, I decided to stop installing/uninstalling the program since it did not make any sense to have it because of the danger that it carries and specially since I don't need it at all.
Bo